v0.9.1 encrypt database and bug fixes

.env.example

@@ -7,7 +7,7 @@ TZ=UTC
 # Copy this file to .env and customize
 
 # Image version to run (set by build.sh, or use 'latest')
-JAMA_VERSION=0.8.8
+JAMA_VERSION=0.9.1
 
 # Default admin credentials (used on FIRST RUN only)
 ADMIN_NAME=Admin User
@@ -24,6 +24,13 @@ ADMPW_RESET=false
 # JWT secret - change this to a random string in production!
 JWT_SECRET=changeme_super_secret_jwt_key_change_in_production
 
+# Database encryption key (SQLCipher AES-256)
+# Generate a strong random key: openssl rand -hex 32
+# IMPORTANT: If you are upgrading from an unencrypted install, run the
+# migration script first: node scripts/encrypt-db.js
+# Leave blank to run without encryption (not recommended for production)
+DB_KEY=
+
 # App port (default 3000)
 PORT=3000