minstrel/internal/db/migrations/0064_clear_subsonic_password.up.sql

-- Before: `minstrel admin reset-password` copied the new login password into
-- subsonic_password, so every account recovered through the CLI had its login
-- password stored in plain text, and a later password change in Settings left
-- that copy behind. After: the CLI does not write this column; a Subsonic
-- password is generated separately in Settings and is never the login
-- password. Clearing every value here removes the copies already made.
--
-- Accounts whose Subsonic client signs in with t/s stop working until the user
-- generates a Subsonic password (or switches the client to an API key).
UPDATE users SET subsonic_password = NULL WHERE subsonic_password IS NOT NULL;