Edit runtime site settings at /admin/config.
What's configurable:
- General: site name, description, timezone, pagination limit, items-per-page defaults
- Registration: new-signup enabled, require email verification, CAPTCHA keys
- Credits: starting balance, daily login bonus, role multipliers, achievement rewards, referral bonus
- Email: SMTP host/port/auth/from-address/reply-to, digest interval
- Security: session timeout, password min-length, failed-login lockout rules
- Uploads: max file size per area, allowed MIME types
- API integrations: hCaptcha, Giphy, link-preview service keys
- Features: toggles for polls / awards / games / BBS directory / referrals
Two-tier: sensitive credentials (DB, SMTP passwords, API secrets) live in .env and are not editable from this panel. Non-secret config lives in config/app.ini and is writable by super admins only.