Re-running the installer after a failed build regenerated JWT_SECRET and MARIADB_ROOT_PASS, overwriting .env with values that didn't match the already-set MariaDB password. Now reads existing .env values and only generates new ones on a fresh install.