From 38bb831809126e8017681ef40514ba644c5f4d9c Mon Sep 17 00:00:00 2001
From: chunzhi <chunzhi@chunzhideMac-mini.local>
Date: Sun, 12 Apr 2026 15:30:07 +0800
Subject: [PATCH] fix: compat adduser --force-badname for older Debian

---
 setup-cf-browser-ssh.sh | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/setup-cf-browser-ssh.sh b/setup-cf-browser-ssh.sh
index f8fcf90..0e46143 100644
--- a/setup-cf-browser-ssh.sh
+++ b/setup-cf-browser-ssh.sh
@@ -465,7 +465,12 @@ create_login_user() {
   fi
 
   info "创建用户 '$user'（无密码，仅证书登录）..."
-  adduser --disabled-password --gecos "" --allow-bad-names "$user"
+  # 新版 adduser 用 --allow-bad-names，旧版用 --force-badname
+  local badname_flag="--allow-bad-names"
+  if adduser --help 2>&1 | grep -q 'force-badname'; then
+    badname_flag="--force-badname"
+  fi
+  adduser --disabled-password --gecos "" "$badname_flag" "$user"
 
   # 配置免密 sudo（证书用户没有密码，普通 sudo 组会要求输入密码）
   local sudoers_file="/etc/sudoers.d/${user//[^a-zA-Z0-9_-]/-}"