clarify mandatory admin bootstrap

2026-09-03 16:24:53 +02:00
parent d33940e37f
commit 0478228c08
3 changed files with 15 additions and 2 deletions
@@ -7,7 +7,7 @@ CORS_ORIGINS=https://your-approved-web-origin.example
 DATA_DIR=/data
 # Required in production; generate at least 32 random characters outside this file.
 SESSION_SECRET=
-# Optional first-run admin bootstrap. Remove both immediately after provisioning.
+# Mandatory for first-run administrator provisioning. Remove both after bootstrap.
 BOOTSTRAP_ADMIN_EMAIL=
 BOOTSTRAP_ADMIN_PASSWORD=
 # Hard safety default; this release has no delivery capability.