HOMELESS — VPS CLEAN DEPLOYMENT PACKAGE
======================================

This package is the cleaned VPS version of the Homeless PHP website.
The web server DocumentRoot must point to the public/ directory, not to the
project root.

Kept application directories
----------------------------
- config/       public-safe configuration loader and private settings template
- includes/     shared PHP application logic
- public/       web-accessible PHP pages and assets
- uploads/      incident photos preserved from the previous website
- sql/          schema and database migrations
- deploy/       example Apache and Nginx virtual-host files
- docs/         migration notes and cleanup report

Important security action
-------------------------
The uploaded shared-hosting copy contained old database credentials and an
agent-service token. They were removed from this package. Rotate both secrets
before using the VPS, even if the old VM database will be retired.

VPS setup
---------
Read VPS_DEPLOYMENT.txt before uploading. Copy config/local_settings.php.example
to config/local_settings.php on the VPS and insert NEW credentials locally.
Never place local_settings.php in a public download or source repository.

Preserved behavior
------------------
- public/index.php still opens the source-site user selector used for testing.
- public/test_user_access.php is intentionally retained because that selector
  posts to it and creates read-only test sessions.
- The public demo menu and role-specific dashboards remain available.
- Existing incident uploads are preserved.

Production note
---------------
The test-user selector reveals active account labels and location tokens. For a
public production launch, replace the public/index.php redirect with login.php?login=1
or restrict source_login.php and test_user_access.php at the web-server level.