From d1da940ffe6ee3914bdd543470da2ae7dcfefb7e Mon Sep 17 00:00:00 2001
From: Yury Kossakovsky <kossakovsky93@gmail.com>
Date: Tue, 30 Dec 2025 17:26:28 -0700
Subject: [PATCH] fix(env): use single quotes for values containing $ to
 prevent expansion

---
 scripts/03_generate_secrets.sh | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/scripts/03_generate_secrets.sh b/scripts/03_generate_secrets.sh
index 2e0aab8..a1e52e8 100755
--- a/scripts/03_generate_secrets.sh
+++ b/scripts/03_generate_secrets.sh
@@ -253,7 +253,13 @@ _update_or_add_env_var() {
     fi
 
     if [[ -n "$var_value" ]]; then
-        echo "${var_name}=\"$var_value\"" >> "$tmp_env_file"
+        # Use single quotes for values containing $ (like bcrypt hashes) to prevent variable expansion
+        # Use double quotes for everything else
+        if [[ "$var_value" == *'$'* ]]; then
+            echo "${var_name}='$var_value'" >> "$tmp_env_file"
+        else
+            echo "${var_name}=\"$var_value\"" >> "$tmp_env_file"
+        fi
     fi
     mv "$tmp_env_file" "$OUTPUT_FILE"
     # trap - EXIT # Remove specific trap for this temp file if desired, or let main script's trap handle it.