build auth modal

UNRAID.md

@@ -71,15 +71,18 @@ Add two path mappings (click **Add another Path** → select **Path** for each):
 
 ### Environment Variables
 
-Add three variables (click **Add another Path** → select **Variable** for each):
+Add five variables (click **Add another Path** → select **Variable** for each):
 
 | Config Type | Name | Key | Value |
 |---|---|---|---|
 | Variable | Public URL | `PUBLIC_URL` | `https://meme.alwisp.com` |
 | Variable | Port | `PORT` | `3000` |
 | Variable | Data Dir | `DATA_DIR` | `/data` |
+| Variable | Admin Username | `ADMIN_USER` | `admin` |
+| Variable | Admin Password | `ADMIN_PASS` | *(your password)* |
 
-> `PUBLIC_URL` is what gets embedded in share links (copy link, Telegram, SMS). Set it to your actual external URL.
+> `PUBLIC_URL` is what gets embedded in share links. Set it to your actual external URL.
+> `ADMIN_PASS` is **required** — the gallery is publicly viewable but upload/edit/delete require this password. Change it before exposing the container to the internet.
 
 3. Click **Apply**. Unraid will pull/start the container.
 4. Check the container log (click the container name → **Log**) — you should see:
@@ -115,6 +118,8 @@ docker run -d \
   -e PUBLIC_URL="https://meme.alwisp.com" \
   -e PORT="3000" \
   -e DATA_DIR="/data" \
+  -e ADMIN_USER="admin" \
+  -e ADMIN_PASS="yourpassword" \
   memer:latest
 ```
 
@@ -174,6 +179,8 @@ docker run -d \
   -e PUBLIC_URL="https://meme.alwisp.com" \
   -e PORT="3000" \
   -e DATA_DIR="/data" \
+  -e ADMIN_USER="admin" \
+  -e ADMIN_PASS="yourpassword" \
   memer:latest
 ```
 
@@ -206,3 +213,5 @@ The SQLite database file is `/mnt/user/appdata/memer/db/memer.db`. Image files a
 | `PUBLIC_URL` | `http://localhost:3000` | External URL embedded in share links — must match your domain |
 | `PORT` | `3000` | Port the Node server listens on inside the container |
 | `DATA_DIR` | `/data` | Root path for images and DB inside the container — do not change unless remapping volumes |
+| `ADMIN_USER` | `admin` | Username for admin login |
+| `ADMIN_PASS` | *(none)* | Password for admin login — **required**, set before exposing to the internet |