UI fixing

deploy/unraid/geointel.env.example

@@ -1,6 +1,11 @@
 # GeoIntel Unraid all-in-one environment template.
 # Copy this file to /mnt/user/appdata/geointel/.env and edit values there.
 
+# GeoIntel runs as ONE container. This makes a bare `docker compose ...` in this
+# directory use the single-container file instead of the multi-container
+# development stack in docker-compose.yml.
+COMPOSE_FILE=docker-compose.unraid.yml
+
 # Browser URL: http://<unraid-ip>:<GEOINTEL_FRONTEND_PORT>
 GEOINTEL_FRONTEND_PORT=1202
 
@@ -24,7 +29,8 @@ GEOINTEL_POSTGRES_USER=geointel
 GEOINTEL_POSTGRES_PASSWORD=change-me-before-shared-use
 
 # Browser origins allowed when directly calling the backend API.
-GEOINTEL_CORS_ORIGINS=http://localhost:1202,http://127.0.0.1:1202,http://192.168.10.150:1202
+# Neem hier ook de publieke hostname op zodra Nginx Proxy Manager ervoor staat.
+GEOINTEL_CORS_ORIGINS=https://geointel.itworx.tech,http://geointel.itworx.tech,http://localhost:1202,http://127.0.0.1:1202,http://192.168.10.150:1202
 
 # Upload guard in MiB. The same 1-2048 limit is applied by nginx and FastAPI.
 GEOINTEL_MAX_UPLOAD_MB=500
@@ -43,6 +49,8 @@ GEOINTEL_AUTH_SESSION_TTL_SECONDS=43200
 # Guest access is enabled by default whenever operator authentication is active.
 # It opens the seeded GeoIntel demo in a temporary, API-enforced restricted
 # session. Set this to false on installations containing private project data.
+# LET OP: scripts/configure_operator_login.sh zet dit op false tenzij je
+# expliciet --guest-access true meegeeft.
 GEOINTEL_GUEST_ACCESS_ENABLED=true
 GEOINTEL_GUEST_DISPLAY_NAME=Gast
 GEOINTEL_GUEST_SESSION_TTL_SECONDS=7200