Fix log permissions, HASHIDS env var generation, and the two errors that have been showing up since the v1.12.0 update (#5324)

Author: Loki-101

.github/docker/entrypoint.sh

@@ -26,6 +26,17 @@ else
     echo -e "APP_KEY=$APP_KEY" > /app/var/.env
   fi
 
+  ## generate a random salt for hashids if not provided
+  if [ -z $HASHIDS_SALT ]; then
+     echo -e "Generating hashids salt."
+     HASHIDS_SALT=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9!@#$%^&*()_+?><~' | fold -w 20 | head -n 1)
+     echo -e "Generated hashids salt: $HASHIDS_SALT"
+     echo -e "HASHIDS_SALT=$HASHIDS_SALT" >> /app/var/.env
+  else
+    echo -e "HASHIDS_SALT exists in environment, using that."
+    echo -e "HASHIDS_SALT=$HASHIDS_SALT" >> /app/var/.env
+  fi
+
   ln -s /app/var/.env /app/
 fi
 
@@ -60,6 +71,13 @@ if [[ -z $DB_PORT ]]; then
   DB_PORT=3306
 fi
 
+## check log folder permissions
+echo "Checking log folder permissions."
+if [ "$(stat -c %U:%G /app/storage/logs)" != "nginx" ]; then
+  echo "Fixing log folder permissions."
+  chown -R nginx: /app/storage/logs/
+fi
+
 ## check for DB up before starting the panel
 echo "Checking database status."
 until nc -z -v -w30 $DB_HOST $DB_PORT

Dockerfile

@@ -14,7 +14,7 @@ FROM --platform=$TARGETOS/$TARGETARCH php:8.3-fpm-alpine
 WORKDIR /app
 COPY . ./
 COPY --from=0 /app/public/assets ./public/assets
-RUN apk add --no-cache --update ca-certificates dcron curl git supervisor tar unzip nginx libpng-dev libxml2-dev libzip-dev certbot certbot-nginx \
+RUN apk add --no-cache --update ca-certificates dcron curl git supervisor tar unzip nginx libpng-dev libxml2-dev libzip-dev certbot certbot-nginx mysql-client \
     && docker-php-ext-configure zip \
     && docker-php-ext-install bcmath gd pdo_mysql zip \
     && curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin --filename=composer \

docker-compose.example.yml

@@ -33,7 +33,7 @@ x-common:
 #
 services:
   database:
-    image: mariadb:10.5
+    image: mariadb:11
     restart: always
     command: --default-authentication-plugin=mysql_native_password
     volumes:
@@ -70,6 +70,7 @@ services:
       REDIS_HOST: "cache"
       DB_HOST: "database"
       DB_PORT: "3306"
+      HASHIDS_LENGTH: 8
 networks:
   default:
     ipam: