HexaWetter v1.2.0: Security, Admin, Radar, UI

.env.example

@@ -36,8 +36,18 @@ CACHE_TTL_OBSERVATIONS=300
 CACHE_TTL_WARNINGS=120
 CACHE_TTL_GEOCODE=86400
 CACHE_TTL_WMS_TIMES=120
+CACHE_TTL_HEALTH_SOURCES=90
+CACHE_TTL_DASHBOARD=60
 
-# Admin (generate with: python scripts/hash_admin_password.py 'your-secure-password')
+# Security (generate with: python scripts/setup_secrets.py 'your-secure-password')
+API_KEY=
+REQUIRE_API_KEY=true
+# Comma-separated origins for CORS (empty = same-origin only when API_KEY is set)
+ALLOWED_ORIGINS=
+# Optional host allowlist, e.g. wetter.example.com,localhost
+ALLOWED_HOSTS=
+
+# Admin (generate with: python scripts/setup_secrets.py 'your-secure-password')
 # bcrypt-Hashes enthalten $ — im .env fuer docker compose jedes $ als $$ schreiben!
 ADMIN_USERNAME=admin
 ADMIN_PASSWORD_HASH=