Centralize deployment settings in the root environment file

Document public domains, ports, upstreams, chat binding, and backup defaults alongside private settings. Validate shared configuration and render Caddy, cgit, and website links from an explicit public allowlist while preserving one installation environment file.

1 files changed, 3 insertions, 1 deletions

diff --git a/README.txt b/README.txt
index 5613a05..9dac54b 100644
--- a/README.txt
+++ b/README.txt
@@ -45,7 +45,9 @@ DEVELOPMENT AND PRODUCTION
     and the production user service. web/ holds the public website and WKD.
     docs/ contains plaintext operations and policy documentation.
 
-    Only .env holds configured secrets. .env.example documents the keys.
+    The single root .env holds deployment settings and configured secrets.
+    The commented .env.example documents hostnames, ports, upstreams, chat,
+    backup recipients, and secret-setting names. See docs/CONFIGURATION.txt.
     var/ contains private persistent data, container storage, temporary work,
     and exports. Generated TLS private keys are runtime data under var/.
     .env, var/, .tools/, target/, bin/, and dist/ are excluded from Git.