New comment by sineemore on void-packages repository https://github.com/void-linux/void-packages/pull/18705#issuecomment-616233544 Comment: @sgn The command ``` sed -i "s!!$secret!" etc/gitea.conf ``` should change the line ``` SECRET_KEY = !#@FDEWREWR&*( ``` in /etc/gitea.conf. As you can see, sed pattern will fail. So right now we already have broken code in INSTALL script. ___ Code, that generates gitea new SECRET_KEY during web based installation: https://github.com/go-gitea/gitea/blob/ad1b6d439fe0e0875e54227e0bc23a74411f490e/routers/install.go#L345 Also there is a way to generate new SECRET_KEY with gitea binary itself: https://github.com/go-gitea/gitea/blob/37c3db7be6dd6fc5ee085979cc5f5dda09d978c3/docs/content/doc/usage/command-line.en-us.md#generate > If you don't want the web installer to be able to write the config file at all, it is also possible to make the config file read-only for the gitea user (owner/group root:root, mode 0660), and set INSTALL_LOCK = true. In that case all database configuration details must be set beforehand in the config file, as well as the SECRET_KEY and INTERNAL_TOKEN values. https://github.com/go-gitea/gitea/blob/3f0cb8b33a6e96a12498c9d5c2ae8dda44a13a62/docs/content/doc/installation/from-binary.en-us.md#create-required-directory-structure