DATABASE_URL="file:./dev.db" SESSION_SECRET="replace-with-a-long-random-secret" INIT_DEFAULT_PASSWORD="replace-with-initial-password" # Optional: if set, /api/settings/init requires header x-init-token INIT_SETUP_TOKEN="replace-with-one-time-init-token"