Secure image access and bootstrap admin

README.md

@@ -22,6 +22,12 @@ services:
     container_name: photography-website
     ports:
       - "8090:8090"
+    environment:
+      - JWT_SECRET=replace-with-a-long-random-secret
+      - INITIAL_ADMIN_USERNAME=MrDiderot
+      - INITIAL_ADMIN_PASSWORD=Start123
+      - FULLS_DIR=/app/public/images/fulls
+      - THUMBS_DIR=/app/public/images/thumbs
     volumes:
       - /path/to/nextcloud/data:/app/public/images/fulls:ro
       - thumbs:/app/public/images/thumbs
@@ -32,6 +38,12 @@ services:
 
 Run `docker compose up -d` to launch the site.
 
+Change the initial admin password after the first login. If you prefer not to store the initial password in `docker-compose.yml`, create a bcrypt hash and use `INITIAL_ADMIN_PASSWORD_HASH` instead:
+
+```bash
+node -e "const bcrypt = require('bcryptjs'); console.log(bcrypt.hashSync('your-admin-password', 10));"
+```
+
 ## Credits & License
 - Originally based on a Jekyll template.
 - UI Design by [AJ / HTML5 UP](https://html5up.net).