echo6-docs/vault/runbooks/meshmonitor-password-reset.md

title	type	tags	aliases	related	updated
MeshMonitor Admin Password Reset	runbook	proxmox		proxmox-onboard-node recon-service-integration ct-runbook headscale-onboard-node recon-operations	2026-06-18

MeshMonitor Admin Password Reset

Overview

Reset the admin password for MeshMonitor web interface.

Item	Value
Service	MeshMonitor
Location	utility CT 100 (192.168.1.100:8080)
Database	SQLite at /data/meshmonitor.db

Prerequisites

• SSH access to Proxmox utility node (192.168.1.241) as root
• sshpass installed on local machine
• python3 with bcrypt module (for generating password hash)

Quick Reset (One-liner)

Reset to a specific password (generates hash inside container to avoid escaping issues):

sshpass -p '7redditGold' ssh -o StrictHostKeyChecking=no root@192.168.1.241 'pct exec 100 -- docker exec meshmonitor node -e "
const Database = require(\"better-sqlite3\");
const bcrypt = require(\"bcrypt\");
const db = new Database(\"/data/meshmonitor.db\");
const hash = bcrypt.hashSync(\"7redditGold\", 10);
db.prepare(\"UPDATE users SET password_hash = ? WHERE username = ?\").run(hash, \"admin\");
console.log(\"Password updated to 7redditGold\");
db.close();
"'

To use a different password, replace both instances of 7redditGold (SSH password and new MeshMonitor password).

Step-by-Step Process

1. SSH to Proxmox Host

ssh root@192.168.1.241

2. Enter the Container

pct exec 100 -- bash

3. Option A: Use Built-in Reset Script (Random Password)

docker exec meshmonitor node /app/reset-admin.mjs

This generates a random password - save the output.

3. Option B: Set Specific Password via Node.js

Generate a bcrypt hash first (run on any machine with Node.js):

node -e "const bcrypt = require('bcrypt'); \
  bcrypt.hash('YOUR_PASSWORD_HERE', 10).then(h => console.log(h));"

Then update the database:

docker exec meshmonitor node -e "
const Database = require('better-sqlite3');
const db = new Database('/data/meshmonitor.db');
db.prepare(\"UPDATE users SET password_hash = ? WHERE username = 'admin'\")
  .run('\$2b\$10\$YOUR_HASH_HERE');
db.close();
"

4. Verify Login

Open http://192.168.1.100:8080 and log in with:

• Username: admin
• Password: (your new password)

Troubleshooting

Check Current Admin User

docker exec meshmonitor node -e "
const Database = require('better-sqlite3');
const db = new Database('/data/meshmonitor.db');
console.log(db.prepare(\"SELECT * FROM users WHERE username='admin'\").get());
db.close();
"

List All Users

docker exec meshmonitor node -e "
const Database = require('better-sqlite3');
const db = new Database('/data/meshmonitor.db');
console.log(db.prepare('SELECT id, username, is_admin, is_active FROM users').all());
db.close();
"

Container Not Running

# On Proxmox host
pct exec 100 -- docker ps -a
pct exec 100 -- docker start meshmonitor

Notes

• The reset-admin.mjs script generates random passwords; use direct DB update for specific passwords
• SQLite3 CLI is not installed in the container; use Node.js with better-sqlite3
• Password column is password_hash in the users table (lowercase)
• Shell escaping gotcha: Bcrypt hashes contain $ characters (e.g., $2b$10$...) which get interpreted by the shell. Always use single quotes around the outer SSH command to preserve them, or generate the hash inside the container using bcrypt.hashSync() directly

---

Created: 2026-02-04