fix(installer): remove conflicting default_redirection_url, add JWT secret for password reset

install.sh

@@ -176,6 +176,10 @@ ENVEOF
 
 [ "$MODE" = "install" ] && gather_inputs
 
+# Derive domains from URLs (needed even when --from-env)
+NEXTWKS_DOMAIN=$(echo "$NEXTWKS_URL" | sed 's|https\?://||;s|/.*||')
+AUTH_DOMAIN=$(echo "$AUTH_URL" | sed 's|https\?://||;s|/.*||')
+
 # ============================================================
 # BUILD (always from source — this is a self-hosted deployment)
 # ============================================================
@@ -186,6 +190,7 @@ if ! command -v go &>/dev/null; then
     exit 1
 fi
 
+VERSION=$(cat "$REPO_DIR/VERSION" 2>/dev/null || echo "dev")
 cd "$REPO_DIR/src"
 BUILD_TIME=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
 COMMIT_SHA=$(git rev-parse --short HEAD 2>/dev/null || echo "unknown")
@@ -201,7 +206,6 @@ go build -ldflags="-s -w \
     -X git.lohmar.co.uk/lexton-it/NextWks/core/version.CommitSHA=${COMMIT_SHA}" \
     -o "$REPO_DIR/app/core" .
 success "Binary built: app/core (${VERSION})"
-BINARY_TARGET="$REPO_DIR/app/core"
 
 # ============================================================
 # INSTALL
@@ -305,7 +309,6 @@ if [ -f "${AUTHELIA_DIR}/authelia" ]; then
 
     cat > "$AUTHELIA_CONFIG" << AUTHEOF
 theme: light
-default_redirection_url: "${NEXTWKS_URL}"
 server:
   host: 0.0.0.0
   port: 9091
@@ -323,13 +326,6 @@ session:
   cookies:
     - domain: "${AUTH_DOMAIN}"
       authelia_url: "${AUTH_URL}"
-      default_redirection_url: "${NEXTWKS_URL}"
-notifier:
-  smtp:
-    address: "${SMTP_HOST}:${SMTP_PORT}"
-    username: "${SMTP_USER}"
-    password: "${SMTP_PASS}"
-    sender: "Authelia <${SMTP_USER}>"
 storage:
   encryption_key: "${STORAGE_KEY}"
   local:
@@ -345,6 +341,9 @@ access_control:
       policy: one_factor
 totp:
   issuer: authelia.com
+identity_validation:
+  reset_password:
+    jwt_secret: "${JWT_SECRET}"
 identity_providers:
   oidc:
     hmac_secret: "${OIDC_HMAC}"