Derives a live per-request runtime from the current config while pinning the
settings a running server cannot change: host/port (the socket is already
bound) and the session secret (rotating it would invalidate live cookies).
Auth mode + credentials (passwordHash, Google client) are read live so a
mode/credential change saved via the UI applies on the next request without a
process restart.
Derives a live per-request runtime from the current config while pinning the settings a running server cannot change: host/port (the socket is already bound) and the session secret (rotating it would invalidate live cookies). Auth mode + credentials (passwordHash, Google client) are read live so a mode/credential change saved via the UI applies on the next request without a process restart.