Fix docker-compose to load all env vars from .env file

- Change from explicit environment vars to env_file: .env
- This ensures OIDC_ENABLED and all OIDC provider settings are loaded
- Update README to show env_file approach

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

Author: JavaDogWebDesign

README.md

@@ -36,22 +36,28 @@ services:
     restart: unless-stopped
     ports:
       - "4123:4123"
-    environment:
-      - SECRET_KEY=CHANGE_ME_TO_A_RANDOM_64_CHARACTER_STRING
-      - FLASK_ENV=production
+    env_file:
+      - .env
     volumes:
       - ./data:/app/data
 ```
 
-### Step 2: Generate a Secret Key
+### Step 2: Create .env file
 
-Run this command and copy the output:
+Create a `.env` file with your configuration:
+
+```env
+SECRET_KEY=CHANGE_ME_TO_A_RANDOM_64_CHARACTER_STRING
+FLASK_ENV=production
+```
+
+Generate a secret key:
 
 ```bash
 docker run --rm python:3.11-slim python -c 'import secrets; print(secrets.token_hex(32))'
 ```
 
-Edit your `docker-compose.yml` and replace `CHANGE_ME_TO_A_RANDOM_64_CHARACTER_STRING` with the generated key.
+Replace `CHANGE_ME_TO_A_RANDOM_64_CHARACTER_STRING` with the generated key.
 
 ### Step 3: Start the Application
 
@@ -87,19 +93,17 @@ docker-compose pull && docker-compose up -d
 
 ## Optional Configuration
 
-Add these environment variables to enable additional features:
+Add these to your `.env` file to enable additional features:
 
-```yaml
-environment:
-  - SECRET_KEY=your-64-character-secret-key
-  - FLASK_ENV=production
-  # Change the port (default: 4123)
-  - PORT=8080
-  # Enable OIDC/SSO authentication
-  - OIDC_ENABLED=true
-  - APP_URL=https://your-domain.com
-  - GOOGLE_CLIENT_ID=your-client-id
-  - GOOGLE_CLIENT_SECRET=your-client-secret
+```env
+# Change the port (default: 4123)
+PORT=8080
+
+# Enable OIDC/SSO authentication
+OIDC_ENABLED=true
+APP_URL=https://your-domain.com
+GOOGLE_CLIENT_ID=your-client-id
+GOOGLE_CLIENT_SECRET=your-client-secret
 ```
 
 ---

docker-compose.yml

@@ -9,11 +9,8 @@ services:
     restart: unless-stopped
     ports:
       - "0.0.0.0:${PORT:-4123}:4123"
-    environment:
-      - SECRET_KEY=${SECRET_KEY}
-      - FLASK_ENV=${FLASK_ENV:-production}
-      - PORT=${PORT:-4123}
-      - HOST=0.0.0.0
+    env_file:
+      - .env
     volumes:
       - ${DATA_PATH:-./data}:/app/data
     healthcheck: