Domserve should accept the password that the judgehost tries to connect with

[Riscky]

This is now done by hand

[maartenberg]

Approach:

• Generate a password and put it in Ansible Vault (creating it)
• Hash the password: php -r 'print password_hash("{{ password }}\", PASSWORD_DEFAULT);'`, capture stdout

• Run this SQL:

  INSERT INTO user (username, name, password) VALUES ('judgehost', 'User for Judgehosts', '{{ pw_hash }}');
  INSERT INTO userrole (userid, userrole) VALUES (last_insert_id(), (SELECT roleid FROM role WHERE role = 'judgehost'));

  Ignore failures as this means the user already exists

[Riscky]

note the

/opt/domjudge/domserver/etc/initial_admin_password.secret
/opt/domjudge/domserver/etc/restapi.secret

files in the domserver container