Fix Docker build and remove private config from .env.example

- Change Dockerfile from Python 3.13 to 3.11 (Pillow compatibility, SQLCipher support)
- Update Pillow from 10.2.0 to 10.4.0
- Remove private Keycloak credentials from .env.example
- Set OIDC_ENABLED=false by default

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

Author: JavaDogWebDesign

.env.example

@@ -42,7 +42,7 @@ SESSION_COOKIE_SECURE=False
 # ============================================================================
 
 # Enable OIDC authentication
-OIDC_ENABLED=true
+OIDC_ENABLED=false
 
 # Allow local username/password authentication as fallback
 # Recommended: true (provides backup auth method)
@@ -117,9 +117,9 @@ OIDC_ALLOW_LOCAL_AUTH=true
 # 4. Copy Client ID and Client Secret
 # 5. Your Keycloak URL format: https://your-keycloak.com/realms/your-realm
 
-KEYCLOAK_CLIENT_ID=myclient
-KEYCLOAK_CLIENT_SECRET=http://192.168.1.33:8180/app/*
-KEYCLOAK_URL=http://192.168.1.33:8080/realms/master
+# KEYCLOAK_CLIENT_ID=your-keycloak-client-id
+# KEYCLOAK_CLIENT_SECRET=your-keycloak-client-secret
+# KEYCLOAK_URL=https://your-keycloak.com/realms/your-realm
 
 # ----------------------------------------------------------------------------
 # GitLab Configuration

Dockerfile

@@ -2,7 +2,7 @@
 # Multi-stage build for optimized production image
 
 # Build stage
-FROM python:3.13-slim AS builder
+FROM python:3.11-slim AS builder
 
 WORKDIR /app
 
@@ -16,7 +16,7 @@ COPY requirements.txt .
 RUN pip install --no-cache-dir --user -r requirements.txt
 
 # Production stage
-FROM python:3.13-slim
+FROM python:3.11-slim
 
 WORKDIR /app
 

requirements.txt

@@ -9,4 +9,4 @@ cryptography==42.0.0
 python-dotenv==1.0.0
 requests==2.31.0
 openpyxl==3.1.2
-Pillow==10.2.0
+Pillow==10.4.0