feat: add FreeRADIUS client configuration, environment-based secret management, and custom entrypoint script

radiuscontroller/entrypoint.sh

@@ -7,10 +7,12 @@ DB_PORT="${DB_PORT:-5432}"
 DB_USER="${DB_USER:-radius}"
 DB_PASS="${DB_PASS:-radpass}"
 DB_NAME="${DB_NAME:-radius}"
+RADIUS_SECRET="${RADIUS_SECRET:-radpass}"
 
 echo "================================================="
 echo " Starting RADIUS Controller & FreeRADIUS Stack"
 echo " DB Host: $DB_HOST:$DB_PORT | Database: $DB_NAME"
+echo " RADIUS Secret: $RADIUS_SECRET (Allows all IP addresses)"
 echo "================================================="
 
 # Dynamically update FreeRADIUS SQL configuration with DB settings
@@ -23,6 +25,12 @@ if [ -f "$SQL_CONF" ]; then
     sed -i "s/radius_db = .*/radius_db = \"$DB_NAME\"/" "$SQL_CONF"
 fi
 
+# Dynamically update RADIUS shared secret for all client networks from env
+CLIENTS_CONF="/etc/freeradius/3.0/clients.conf"
+if [ -f "$CLIENTS_CONF" ]; then
+    sed -i "s/secret = .*/secret = $RADIUS_SECRET/" "$CLIENTS_CONF"
+fi
+
 # Ensure correct permissions for FreeRADIUS config directory
 chown -R freerad:freerad /etc/freeradius/3.0/ || true