From 02e867ce94be9bf1dece1be91cc43d1759ce474b Mon Sep 17 00:00:00 2001
From: bvandeusen <bryan.vandeusen@fabledsword.com>
Date: Sun, 19 Apr 2026 17:40:36 +0000
Subject: [PATCH] docs: refresh config.example.yaml with auth/library/subsonic
 sections

---
 config.example.yaml | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/config.example.yaml b/config.example.yaml
index 2b21f2a3..eb3c6bee 100644
--- a/config.example.yaml
+++ b/config.example.yaml
@@ -13,3 +13,26 @@ database:
 log:
   level: "info"    # debug | info | warn | error
   format: "text"   # text | json
+
+auth:
+  # One-shot admin bootstrap. Applied only when the users table is empty.
+  # Set username to enable; leave password blank to have the server generate
+  # one and log it to stderr on first start.
+  # Env: SMARTMUSIC_AUTH_ADMIN_USERNAME, SMARTMUSIC_AUTH_ADMIN_PASSWORD
+  admin_bootstrap:
+    username: ""
+    password: ""
+
+library:
+  # Filesystem roots to scan for music. Each path is walked recursively.
+  # Env: SMARTMUSIC_LIBRARY_SCAN_PATHS (colon-separated, PATH-style)
+  scan_paths: []
+  # Kick off a scan on server startup. Env: SMARTMUSIC_LIBRARY_SCAN_ON_STARTUP
+  scan_on_startup: false
+
+subsonic:
+  # Gate for the legacy `p=` plaintext password parameter on /rest/*.
+  # Leave disabled unless a specific client requires it — Minstrel prefers
+  # apiKey (OpenSubsonic) and falls back to u+t+s token auth.
+  # Env: SMARTMUSIC_SUBSONIC_ALLOW_PLAINTEXT_PASSWORD
+  allow_plaintext_password: false