From f56dc8efa93ae310a3277baf0ab733c58e9000ec Mon Sep 17 00:00:00 2001
From: Shane Maynard <snowspeeder@gmail.com>
Date: Wed, 29 Jul 2026 22:12:37 -0400
Subject: [PATCH] feat: allow initial admin setup from landing page

---
 public/js/landing.js | 7 ++++---
 public/landing.html  | 7 +++++++
 2 files changed, 11 insertions(+), 3 deletions(-)

diff --git a/public/js/landing.js b/public/js/landing.js
index 0df9cd0..3003145 100644
--- a/public/js/landing.js
+++ b/public/js/landing.js
@@ -19,6 +19,7 @@ form.addEventListener("submit", (event) => {
 	event.preventDefault();
 	submit("/api/auth/login");
 });
-document
-	.querySelector("#signup")
-	.addEventListener("click", () => submit("/api/auth/signup"));
+document.querySelector("#signup").addEventListener("click", () => {
+	const setupToken = form.elements.setupToken.value;
+	submit(setupToken ? "/api/auth/bootstrap" : "/api/auth/signup");
+});
diff --git a/public/landing.html b/public/landing.html
index 5e557f9..5bedc66 100644
--- a/public/landing.html
+++ b/public/landing.html
@@ -31,6 +31,13 @@
               minlength="12"
               name="password"
               autocomplete="current-password" /></label
+          ><label
+            >Initial admin setup token (first account only)
+            <input
+              class="field-input"
+              type="password"
+              name="setupToken"
+              autocomplete="off" /></label
           ><button class="primary-btn" type="submit">Log in</button
           ><button class="ghost-btn" type="button" id="signup">
             Create account