init

README.md

@@ -49,8 +49,8 @@ cargo run
 
 Migrations are applied automatically during startup.
 
-Server starts on `http://localhost:3000`.
-Web UI is available at `http://localhost:3000/`.
+Server binds to `0.0.0.0:${PORT}` (defaults to `3000`).
+Web UI is available at `http://localhost:${PORT}/`.
 
 ## Authentik setup notes
 
@@ -58,6 +58,8 @@ Create an Authentik OAuth2/OIDC provider + application and set:
 - Redirect URI: `http://localhost:3000/auth/callback`
 - Scopes including at least: `openid profile email`
 
+If you change `PORT`, update `OIDC_REDIRECT_URL` and this redirect URI to match.
+
 Then copy provider endpoints into env:
 - `OIDC_AUTHORIZE_URL`
 - `OIDC_TOKEN_URL`