first pass?

.env.example

@@ -0,0 +1,25 @@
+# Filesystem mount where notes live (NAS). In Docker this is /data/notes
+DATA_DIR=data/notes
+
+# SQLite metadata + search index (local disk). In Docker this is /data/snotes.db
+DATABASE_PATH=snotes.db
+
+# Comma-separated fixed user list (seeded at startup)
+USERS=schmeeve,ilya
+
+# Shared space name (virtual user everyone can access)
+COMMON_SPACE=common
+
+# Remote-access password. Empty means remote access is disabled.
+# Local (LAN) access never requires a password.
+REMOTE_PASS=
+
+# Secret used to sign auth cookies -- set to a long random string in production
+SECRET_KEY=change-me-in-production
+
+# Subnet(s) treated as "local" (no password), comma-separated
+LAN_CIDRS=192.168.1.0/24
+
+HOST=0.0.0.0
+PORT=8000
+LOG_LEVEL=INFO