Migration to last.fm, removed old spotify api client. FOSRestBundle API serving data driven front end (JWT).

docs/setup.md

@@ -2,7 +2,7 @@
 
 ## Prerequisites
 - Docker + Docker Compose
-- Spotify Developer account (Client ID/Secret)
+- Last.fm API key
 - A unique `APP_SECRET` value in your environment (for prod builds)
 
 ## 1) Start the stack
@@ -18,15 +18,19 @@ Health: `http://localhost:8085/healthz`
 docker compose exec tonehaus php bin/console app:promote-admin you@example.com
 ```
 
-## 3) Configure Spotify
-- Preferred: open `/admin/settings` and enter your Client ID/Secret (stored in DB)
+## 3) Configure Last.fm
+- Preferred: open `/admin/settings` and enter your Last.fm API key (stored in DB)
 - Env fallback (in `.env` or your shell):
 ```bash
-SPOTIFY_CLIENT_ID=your_client_id
-SPOTIFY_CLIENT_SECRET=your_client_secret
+LASTFM_API_KEY=your_api_key
 ```
 
-## 4) (Optional) Seed demo data
+## 4) JWT auth keys
+- API login endpoint: `POST /api/v1/auth/login`
+- JWT keys are generated automatically on container start into `config/jwt/`.
+- Set `JWT_PASSPHRASE` in `.env` to your production secret.
+
+## 5) (Optional) Seed demo data
 ```bash
 docker compose exec tonehaus php bin/console app:seed-demo-users --count=50
 docker compose exec tonehaus php bin/console app:seed-demo-albums --count=40 --attach-users
@@ -44,7 +48,8 @@ docker compose exec tonehaus php bin/console app:seed-demo-reviews --cover-perce
 ## Environment variables
 - `APP_ENV=dev|prod`
 - `APP_SECRET=<random_string>`
-- `SPOTIFY_CLIENT_ID`, `SPOTIFY_CLIENT_SECRET`
+- `LASTFM_API_KEY`
+- `JWT_PASSPHRASE=<random_string>`
 - `APP_ALLOW_REGISTRATION=1|0` (env can override DB setting)
 - `DATABASE_DRIVER=sqlite|postgres`
 - `DATABASE_SQLITE_PATH` (optional)