It is not mentioned anywhere. But, the docs clearly say config_distro is intended for packagers (might get replaced if things change) and config_local for the end users.
So, you're supposed to create a config_local for your settings.
There are multiple configuration files that are read at startup by pgAdmin. These are as follows:
config.py: This is the main configuration file, and should not be modified. It can be used as a reference for configuration settings, that may be overridden in one of the following files.
config_distro.py: This file is read after config.py and is intended for packagers to change any settings that are required for their pgAdmin distribution. This may typically include certain paths and file locations. This file is optional, and may be created by packagers in the same directory as config.py if needed.
config_local.py: This file is read after config_distro.py and is intended for end users to change any default or packaging specific settings that they may wish to adjust to meet local preferences or standards.This file is optional, and may be created by users in the same directory as config.py if needed.
Can you point out the section that states config_distro.py will be overwritten on upgrade (I can't seem to find it)?
Can you explain *why* it just started replacing (in in the process removing the MASTER_PASSWORD_REQUIRED = False statement) it in the 4.14 upgrade, but not before?
Just upgraded pgAdmin4 to the latest version 4.14. Even though I have had the Master Password requirement disabled for as long as it has been in existence, guess what I was greeted with upon starting pgAdmin4? If you guessed the prompt requiring me to create a Master Password, or be locked out of the UI, give yourself a prize.
Seriously people, I don't want/need a Master Password. Not now, not ever.