add auth

backend/app/config.py

@@ -85,6 +85,17 @@ class EnvSettings(BaseSettings):
     telegram_chat_id: str = ""
     slack_webhook_url: str = ""
 
+    # ---- web login (closes the browser UI; the desktop app keeps API_TOKEN) ---
+    auth_username: str = "timka"
+    auth_password: str = ""
+    """Set once; the hash is seeded into settings on first boot, never stored here."""
+
+    telegram_owner_id: str = ""
+    """Your numeric Telegram user id — https://t.me/userinfobot says it in a DM."""
+
+    telegram_bot_username: str = ""
+    """Without the `@`. Needed to render the Telegram Login Widget."""
+
     @property
     def cors_origin_list(self) -> list[str]:
         if self.cors_origins.strip() == "*":