Removed auth

README.Docker.md

@@ -8,6 +8,16 @@ Quick run (Docker Engine required):
 
 2. App will be available on host port 8002 -> container 8080 (http://localhost:8002).
 
+Authentication mode:
+
+- Authentication is disabled by default and every request runs as the configured default admin user. This is intended for deployments fronted by Cloudflare Zero Trust.
+- Re-enable the built-in login flow by setting `AppAuth__Enabled=true` or changing `AppAuth:Enabled` to `true` in appsettings.json.
+- The default admin identity used while auth is disabled is configured under `AppAuth:DefaultUsername` and `AppAuth:DefaultUserId`.
+
+Health endpoint:
+
+- `GET /healthz` returns JSON health information, including whether built-in authentication is enabled and whether the Couchbase Lite collections initialized correctly.
+
 Docker persistence:
 
 - The app now uses an embedded Couchbase Lite database stored under `/data/couchbase` inside the container.
@@ -41,6 +51,11 @@ Manual shutdown:
 
 - `docker compose down`
 
+Docker Playwright smoke tests:
+
+- Run `docker compose -f docker-compose.yml -f docker-compose.tests.yml up --build --abort-on-container-exit --exit-code-from playwright playwright`
+- The suite starts the app in Docker, waits for `/healthz`, and verifies that protected pages load without a login screen.
+
 Notes:
 
 - The base compose file remains production-oriented; the override file is the optional containerized development layer.