chore: makefile + setup

.env.example

@@ -0,0 +1,17 @@
+# Copy to .env (which is gitignored) — `make env` generates one with fresh secrets.
+# Both the systemd service and the reminder cron job read this file.
+#
+# Values must stay shell-safe and unquoted: the cron wrapper sources this file, so
+# a secret containing ')' or '$' would break it. `make env` uses a URL-safe alphabet.
+
+DJANGO_SECRET_KEY=change-me
+DJANGO_DEBUG=0
+DJANGO_ALLOWED_HOSTS=osiris.legrems.xyz,127.0.0.1,localhost
+DJANGO_CSRF_TRUSTED_ORIGINS=https://osiris.legrems.xyz
+DJANGO_TIME_ZONE=Europe/Zurich
+
+# From `make vapid` / `manage.py generate_vapid_keys`. Without these, reminders
+# are disabled and the Today page's Reminders card says so.
+VAPID_PUBLIC_KEY=
+VAPID_PRIVATE_KEY=
+VAPID_CLAIM_EMAIL=flamelegrems@gmail.com