first commit

.env.example

@@ -0,0 +1,44 @@
+# env_file načítá hodnoty RAW — $ znaky v ADMIN_HASH NEESCAPUJ, piš normálně
+# Vygeneruj hash: docker compose exec app php -r "echo password_hash('heslo', PASSWORD_BCRYPT) . PHP_EOL;"
+
+APP_PORT=8080
+
+DB_NAME=streamers_db
+DB_USER=streamers_user
+DB_PASS=change_me_strong_db_password
+
+# Plaintext heslo — hash se vygeneruje automaticky při startu
+ADMIN_PASSWORD=tve_admin_heslo
+# NEBO vlož hash přímo ($ neescapuj):
+# ADMIN_HASH=$2y$10$xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+
+SESSION_SECRET=change_me_to_something_very_random_here
+
+TWITCH_CLIENT_ID=
+TWITCH_CLIENT_SECRET=
+
+LIVE_CACHE_TTL=120
+ALLOWED_ORIGIN=*
+
+
+# Random session secret (min 32 chars)
+SESSION_SECRET=change_me_to_something_very_random_here
+
+# Twitch API — https://dev.twitch.tv/console/apps
+TWITCH_CLIENT_ID=
+TWITCH_CLIENT_SECRET=
+# OAuth redirect URI — must match exactly what's registered in Twitch dev console
+TWITCH_OAUTH_REDIRECT_URI=https://rating.naughtybulldogs.eu/api/oauth?provider=twitch
+
+# Kick OAuth — PKCE flow
+# Registrace: https://kick.com/settings/developer
+# Redirect URL: https://rating.naughtybulldogs.eu/api/oauth?provider=kick
+KICK_OAUTH_CLIENT_ID=
+KICK_OAUTH_CLIENT_SECRET=
+KICK_OAUTH_REDIRECT_URI=https://rating.naughtybulldogs.eu/api/oauth?provider=kick
+
+# Live status cache TTL in seconds
+LIVE_CACHE_TTL=120
+
+# Your public domain for CORS (use * for local dev)
+ALLOWED_ORIGIN=*