fixes and improvements

.env.example

@@ -1,13 +1,4 @@
-JELLYFIN_URL=https://jellyfin.example.com
-JELLYFIN_API_KEY=your-api-key
-# Optional if /Users works with your API key. Otherwise set the id of the Jellyfin user whose library views should be shown.
-JELLYFIN_USER_ID=
-
-# Optional Jellyseerr enrichment for the Users tab.
-JELLYSEERR_URL=https://requests.example.com
-JELLYSEERR_API_KEY=your-jellyseerr-api-key
-
-# Optional logging level for backend diagnostics.
+# Optional backend logging level.
 LOG_LEVEL=INFO
 
 # Optional SMTP settings for the Users -> message popup.
@@ -21,20 +12,17 @@ SMTP_USE_TLS=true
 SMTP_USE_SSL=false
 SMTP_TIMEOUT=30
 
-SSH_HOST=media-server.example.com
-SSH_USERNAME=username
-SSH_PORT=22
-# Host-side directory mounted into the backend container at /root/.ssh.
-SSH_KEY_HOST_DIR=/absolute/path/to/your/ssh-dir
-# Container-side path assembled by the app:
-SSH_KEY_DIRECTORY=/root/.ssh
-SSH_KEY_NAME=id_ed25519
-# SSH_PASSWORD=optional-password-or-key-passphrase
-REMOTE_MEDIA_ROOT=/mnt/media
-# Optional fallback prefix when REMOTE_MEDIA_ROOT mapping is not enough.
-# Example: Jellyfin gives /media/... but SSH host requires /srv/media/...
-REMOTE_PATH_PREFIX=
-
+# Machine/service configuration now lives in the app's Settings tab.
+# The built-in local machine is seeded automatically.
+#
+# For a remote SSH machine, the backend still needs access to a private key
+# file. Compose mounts a single host key file as a Docker secret instead of the
+# whole ~/.ssh directory.
+#
+# Host-side path used by Docker Compose secret definitions:
+SSH_KEY_HOST_PATH=/absolute/path/to/id_ed25519
+# The container-side path is fixed by the app and Compose at:
+# /run/secrets/ssh_private_key
 
 # For deployment with traefik
 FRONTEND_APP_NAME=manage