From 298c87c1903bad8efafe38e11be3faf86fed2975 Mon Sep 17 00:00:00 2001
From: "CanbiZ (MickLesk)" <47820557+MickLesk@users.noreply.github.com>
Date: Mon, 20 Apr 2026 08:34:55 +0200
Subject: [PATCH] Wanderer: add pocketbase CLI wrapper with env

Fixes #13858

Running pocketbase commands manually (e.g. superuser upsert) fails
because POCKETBASE_ENCRYPTION_KEY is only loaded via systemd env.
Add /usr/local/bin/wanderer-pb wrapper that sources .env before
executing pocketbase.
---
 install/wanderer-install.sh | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/install/wanderer-install.sh b/install/wanderer-install.sh
index 4c6394673..1f8c3314d 100644
--- a/install/wanderer-install.sh
+++ b/install/wanderer-install.sh
@@ -60,6 +60,16 @@ wait -n
 EOF
 chmod +x /opt/wanderer/start.sh
 
+cat <<'EOF' >/usr/local/bin/wanderer-pb
+#!/usr/bin/env bash
+set -a
+source /opt/wanderer/.env
+set +a
+cd /opt/wanderer/source/db
+exec ./pocketbase "$@" --dir="$PB_DB_LOCATION"
+EOF
+chmod +x /usr/local/bin/wanderer-pb
+
 cat <<EOF >/etc/systemd/system/wanderer-web.service
 [Unit]
 Description=wanderer