is there a way to create initialize admin user without gui interaction?

[camaeel]

Possibility to create initial admin user from GUI makes it a bit dangerous - if someone does it before I do he can overtake my netmaker installation.
Is there any way to interract with application or the database to initialize application with the first admin account and disable option to create it from the UI/API?

[mattkasun]

you can use nmctl

[jessebot]

I looked at https://docs.netmaker.io/nmctl.html#context but I'm not sure what the initial user should be? I assume I use the MASTER_KEY I set via the docker env var as the password, but what would the initial user be for setting up nmctl?

This allows me to set it (replaced real domain with example for posting on github):

nmctl context set mytestcontext --endpoint=https://api.netmaker.example.com  --username=master --password=mymasterkey
nmctl context use mytestcontext 

For the creation of a user, I know I can do:

$ nmctl user create --name me@beepboop.com --password test
2024/03/26 09:49:28 Error Status: 400 Response: {"Code":400,"Message":"incorrect credentials"}

But currently it fails. The other question is how do you disable registration?

[jessebot]

oh wait, I managed to authenticate with:

nmctl context set mytestcontext --endpoint=https://api.netmaker.example.com --master_key=mymasterkey
nmctl context use mytestcontext 

But when I try to create an admin user, it fails:

$ nmctl user create --name me@beepboop.com --password test --admin
2024/03/26 10:07:33 Error Status: 500 Response: {"Code":500,"Message":"no result found"}{"Code":403,"Message":"only superadmin can create admin users"}

So the question is still can you create an initial admin user, and then disable registration?

I guess I should also ask if there's a way to create an initial super admin?

Update

Found this in the docs and it works!:

curl --location 'https://api.netmaker.example.com/api/users/adm/createsuperadmin' \
--header 'Content-Type: application/json' \
--data '{
"username":"superadmin",
"password":"NetmakerIsAwe$ome"
}'

after doing that, it automatically disables the registration part of netmaker :) NOTE: this only works if there's not already a superadmin called superadmin.