refactor: unify config and data structures

config.example.yaml

@@ -1,31 +1,30 @@
-server:
-  host: "0.0.0.0"
-  port: 8080
-  # Set this to your public-facing URL so discovery responses are correct.
-  # base_url: "https://dav.example.com"
-
-auth:
-  realm: "My DAV Server"
-
-storage:
-  data_dir: "./data"
-
-logging:
-  level: "debug" # debug | info | warn | error
-  format: "text" # text | json
-
-tls:
-  enabled: false
-  # cert_file: "/etc/ssl/certs/dav.crt"
-  # key_file:  "/etc/ssl/private/dav.key"
-
-# Users, calendars, and address books are no longer configured here — they
-# are stored in the database (<data_dir>/nidus.db) and managed with
-# nidusctl or the web UI (/web/):
+# nidus configuration via environment variables
 #
-#   nidusctl user create alice --password mysecretpassword --display-name "Alice Smith" --email alice@example.com
-#   nidusctl calendar create alice personal
-#   nidusctl calendar create alice work
-#   nidusctl addressbook create alice contacts
+# Environment variables override any defaults shown below.
+# Set them before starting the server.
 #
-# Run `nidusctl help` for the full command list.
+# Server configuration:
+#   NIDUS_HOST      - listen host (default: 0.0.0.0)
+#   NIDUS_PORT      - listen port (default: 8080)
+#   NIDUS_BASE_URL  - public URL for DAV responses (default: auto-generated from host:port)
+#
+# Authentication:
+#   NIDUS_AUTH_REALM  - HTTP Basic Auth realm (default: "DAV Server")
+#
+# Storage:
+#   NIDUS_DATA_DIR  - data directory (default: ./data)
+#
+# Logging:
+#   NIDUS_LOG_LEVEL   - log level: debug, info, warn, error (default: info)
+#   NIDUS_LOG_FORMAT  - log format: text, json (default: text)
+
+# Example (uncomment and modify as needed):
+# export NIDUS_HOST="0.0.0.0"
+# export NIDUS_PORT="8080"
+# export NIDUS_BASE_URL="https://dav.example.com"
+# export NIDUS_DATA_DIR="./data"
+# export NIDUS_LOG_LEVEL="info"
+# export NIDUS_LOG_FORMAT="text"
+
+# Note: The server does not handle TLS - use a reverse proxy (e.g. Nginx, Caddy,
+# Traefik) to terminate TLS and forward requests to the server.