sec: remove certs/cookie from tracking, parameterize LiveKit secrets, add .env.example

.env.example

@@ -1,25 +1,23 @@
-# App
-DUMPSTER_HOST=localhost
-DUMPSTER_PORT=8080
-DUMPSTER_SECRET=*** Database
-POSTGRES_HOST=localhost
-POSTGRES_PORT=5432
+# dumpsterChat Environment Configuration
+# Copy this file to .env and fill in your values.
+
+# Server
+DUMPSTER_HOST=dumpster.dustin.coffee
+DUMPSTER_SECRET=generate-a-random-secret-here
+
+# Database
 POSTGRES_USER=dumpster
-POSTGRES_PASSWORD=dumpster
-POSTGRES_SSLMODE=disable
-# Valkey
-VALKEY_URL=redis://localhost:***@example.com
-# MinIO
-MINIO_ENDPOINT=minio:9000
-MINIO_ACCESS_KEY=<generated>
-MINIO_SECRET_KEY=<gener...n
-# LiveKit
-LIVEKIT_URL=wss://livekit.your.domain
-LIVEKIT_API_KEY=<generated>
-LIVEKIT_API_SECRET=<gener...n
-# Web Push
-VAPID_PUBLIC_KEY=<generated>
-VAPID_PRIVATE_KEY=<generated>
-VAPID_SUBJECT=admin@your.domain
-# Integrations
-GIPHY_API_KEY=your_giphy_api_key_here
+POSTGRES_PASSWORD=generate-a-random-password-here
+POSTGRES_DB=dumpster
+
+# MinIO (optional — omit for local filesystem)
+MINIO_ENDPOINT=
+MINIO_ACCESS_KEY=
+MINIO_SECRET_KEY=
+
+# LiveKit (WebRTC / voice)
+LIVEKIT_API_KEY=generate-a-random-key-here
+LIVEKIT_API_SECRET=generate-a-random-secret-here
+
+# Giphy (optional — for GIF search)
+GIPHY_API_KEY=