delete zone.identifier files + add config.php

.gitignore

@@ -1,3 +1,2 @@
 .env
-config.php
 *.log

config.php

@@ -0,0 +1,28 @@
+<?php
+// ============================================================
+//  config.php  —  database & API credentials
+//  Copy to server, never commit to git with real values
+// ============================================================
+
+define('DB_HOST', 'localhost');
+define('DB_PORT', '5432');
+define('DB_NAME', 'streamers_db');
+define('DB_USER', 'streamers_user');
+define('DB_PASS', 'change_me_strong_password');
+
+define('ADMIN_HASH', '$2y$12$CHANGE_THIS_TO_REAL_BCRYPT_HASH');
+define('SESSION_SECRET', 'change_me_to_random_32char_string_min');
+
+// Twitch API — live status check
+define('TWITCH_CLIENT_ID',     'your_twitch_client_id');
+define('TWITCH_CLIENT_SECRET', 'your_twitch_client_secret');
+
+// Twitch OAuth — for user login (comments auth)
+// Redirect URI must be registered in https://dev.twitch.tv/console/apps
+define('TWITCH_OAUTH_CLIENT_ID',     'your_twitch_client_id');   // can be same app as above
+define('TWITCH_OAUTH_CLIENT_SECRET', 'your_twitch_client_secret');
+define('TWITCH_OAUTH_REDIRECT_URI',  'https://rating.naughtybulldogs.eu/api/oauth?provider=twitch');
+
+define('KICK_API_BASE', 'https://kick.com/api/v2/channels');
+define('LIVE_CACHE_TTL', 120);
+define('ALLOWED_ORIGIN', 'https://yourdomain.cz');