Data

Rotate the PocketBase superuser password

Generates a new PB superuser password, re-injects it as the encrypted POCKETBASE_ADMIN_PASSWORD env var, and updates the latest deployment's stored credential so subsequent /apps/{appRef}/data/* calls keep working. By default the response only contains the rotation confirmation and email — the plaintext password never appears in the response body. Pass ?reveal=true to additionally return the plaintext once (same one-time-show pattern as token creation). Audit log records method/path/status/userId only, never response bodies, so revealed plaintext does not land in /var/log.

post/apps/{appRef}/data/reset-superuser

Request

  • Base URL: https://api.percher.run
  • URL: https://api.percher.run/apps/{appRef}/data/reset-superuser
  • Auth: HTTP bearer

Path parameters

appRefstring required

Query parameters

revealboolean

Set to true to include the plaintext password in the response. Default false.

Response

Rotation succeeded. password is present only when ?reveal=true was set.

messagestring required
emailstring email required
passwordstring

Plaintext PB superuser password. Present only when invoked with ?reveal=true.

Changes

No recorded changes to this operation across all 1 revision of this API.