auth modal

Dockerfile

@@ -23,6 +23,13 @@ ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser
 ENV NODE_ENV=production
 ENV PORT=3001
 ENV DB_PATH=/data/cpas.db
+# ── Bootstrap admin credentials ───────────────────────────────────────────────
+# The admin account is created/synced from these on startup. OVERRIDE the
+# password at deploy time, e.g.:
+#   docker run -e ADMIN_PASSWORD='your-strong-secret' ...
+# Rotating ADMIN_PASSWORD here and restarting rotates the live admin credential.
+ENV ADMIN_USERNAME=admin
+ENV ADMIN_PASSWORD=changeme
 WORKDIR /app
 COPY --from=builder /build/node_modules ./node_modules
 COPY --from=builder /build/client/dist  ./client/dist