fix landing page

.env.example

@@ -1,9 +1,15 @@
 # Parking Manager Configuration
 
-# Security - REQUIRED: Change in production!
+# =============================================================================
+# REQUIRED - Security
+# =============================================================================
+# MUST be set to a random string of at least 32 characters
+# Generate with: openssl rand -hex 32
 SECRET_KEY=change-me-to-a-random-string-at-least-32-chars
 
+# =============================================================================
 # Server
+# =============================================================================
 HOST=0.0.0.0
 PORT=8000
 
@@ -13,14 +19,54 @@ DATABASE_PATH=/app/data/parking.db
 # CORS (comma-separated origins, or * for all)
 ALLOWED_ORIGINS=https://parking.rocketscale.it
 
+# JWT token expiration (minutes, default 24 hours)
+ACCESS_TOKEN_EXPIRE_MINUTES=1440
+
+# Logging level (DEBUG, INFO, WARNING, ERROR)
+LOG_LEVEL=INFO
+
+# =============================================================================
+# Rate Limiting
+# =============================================================================
+# Number of requests allowed per window for sensitive endpoints (login, register)
+RATE_LIMIT_REQUESTS=5
+# Window size in seconds
+RATE_LIMIT_WINDOW=60
+
+# =============================================================================
 # Authentication
+# =============================================================================
 # Set to true when behind Authelia reverse proxy
 AUTHELIA_ENABLED=false
 
-# SMTP - Email Notifications (optional)
-SMTP_HOST=
+# Header names (only change if your proxy uses different headers)
+AUTHELIA_HEADER_USER=Remote-User
+AUTHELIA_HEADER_NAME=Remote-Name
+AUTHELIA_HEADER_EMAIL=Remote-Email
+AUTHELIA_HEADER_GROUPS=Remote-Groups
+
+# LLDAP group that maps to admin role
+AUTHELIA_ADMIN_GROUP=parking_admins
+
+# External URLs for Authelia mode (used for landing page buttons)
+# Login URL - Authelia's login page (users are redirected here to authenticate)
+AUTHELIA_LOGIN_URL=https://auth.rocketscale.it
+# Registration URL - External registration portal (org-stack self-registration)
+REGISTRATION_URL=https://register.rocketscale.it
+
+# =============================================================================
+# Email Notifications
+# =============================================================================
+# Set to true to enable email sending
+SMTP_ENABLED=false
+
+# SMTP server configuration
+SMTP_HOST=localhost
 SMTP_PORT=587
 SMTP_USER=
 SMTP_PASSWORD=
-SMTP_FROM=noreply@rocketscale.it
+SMTP_FROM=noreply@parking.local
 SMTP_USE_TLS=true
+
+# When SMTP is disabled, emails are logged to this file
+EMAIL_LOG_FILE=/tmp/parking-emails.log