From 66dc9ae50364dd6fc456d41543666cd4a562cb1d Mon Sep 17 00:00:00 2001
From: ClaudioDrews <claudio@drews.com.br>
Date: Sun, 7 Jun 2026 13:33:31 -0300
Subject: [PATCH] fix: disable Qdrant API key when empty to prevent
 auth-on-empty-key bug

Qdrant v1.17+ enables authentication when QDRANT__SERVICE__API_KEY
env var is set (even to empty string). Since the default in setup.sh
is no Qdrant key (localhost-only bind), we now conditionally remove
the line from docker-compose.yml when QDRANT_API_KEY is unset.
---
 setup.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/setup.sh b/setup.sh
index a657ead..e9b9b38 100755
--- a/setup.sh
+++ b/setup.sh
@@ -242,6 +242,12 @@ DOCKERENV
 
 ok "docker/.env created"
 
+# Patch docker-compose.yml: remove Qdrant API key line when empty (v1.17+ enables auth on empty key)
+if [ -z "${QDRANT_API_KEY}" ]; then
+    info "Qdrant API key not set — disabling Qdrant authentication"
+    sed -i '/^.*QDRANT__SERVICE__API_KEY:/s/.*/      # QDRANT__SERVICE__API_KEY: disabled (no key set)/' docker-compose.yml
+fi
+
 # Pull pre-built images first (Redis, Qdrant) — fast
 info "Downloading pre-built images (Redis, Qdrant)..."
 docker compose pull redis qdrant 2>&1 | tail -3