feat: sync public links and phone change updates

.env.example

@@ -23,8 +23,10 @@ TELESRV_SMTP_FROM_NAME=telesrv
 TELESRV_SMTP_TLS=starttls
 TELESRV_SMTP_TIMEOUT=10s
 
-# Client-visible telesrv links. Production uses https://telesrv.net.
-# For local link/deeplink smoke tests use http://127.0.0.1:2401.
+# Client-visible telesrv links. This is an HTTP(S) URL, not a listen address.
+# Production uses https://telesrv.net. For local link/deeplink smoke tests use
+# http://127.0.0.1:2401. Invalid schemes, credentials, query strings, fragments,
+# or a missing host fail startup instead of silently falling back.
 TELESRV_PUBLIC_BASE_URL=https://telesrv.net
 
 # Admin API / Admin UI 配置
@@ -32,18 +34,19 @@ TELESRV_PUBLIC_BASE_URL=https://telesrv.net
 # TELESRV_ADMIN_API_TOKEN 是主服务 (cmd/telesrv) 暴露 Admin REST API 的鉴权 token，
 # 也是 Admin UI (cmd/telesrv-admin) 调用 Admin API 时使用的凭证。
 # 重要：主服务与 Admin UI 必须使用完全相同的 TELESRV_ADMIN_API_TOKEN，否则管理后台无法执行写操作。
-TELESRV_ADMIN_API_TOKEN=change-me-to-a-strong-random-token
+TELESRV_ADMIN_API_TOKEN=
 
 # TELESRV_ADMIN_UI_PASSWORD 是登录管理后台的密码；
 # 也可改用 TELESRV_ADMIN_UI_TOKEN，二者至少填一个。
-TELESRV_ADMIN_UI_PASSWORD=abc123456
+TELESRV_ADMIN_UI_PASSWORD=
+TELESRV_ADMIN_UI_TOKEN=
 
 # TELESRV_ADMIN_SESSION_KEY 用于加密 Admin UI 的登录 session cookie。
 # 生产环境请使用至少 32 字节的强随机字符串，修改后会导致已登录会话失效。
-TELESRV_ADMIN_SESSION_KEY=change-me-to-a-strong-random-key-at-least-32-chars
+TELESRV_ADMIN_SESSION_KEY=
 
-# 主服务 Admin API 默认关闭；Admin UI 写操作需要显式开启该 loopback 监听地址。
-TELESRV_ADMIN_API_ADDR=127.0.0.1:2599
+# 主服务 Admin API 默认关闭；Admin UI 写操作需要同时配置强 token 并显式开启该 loopback 监听地址。
+TELESRV_ADMIN_API_ADDR=
 
 # Admin UI 监听地址，默认值通常无需修改；RTMP ingest 保留 2400。
 TELESRV_ADMIN_UI_ADDR=127.0.0.1:2600
@@ -61,8 +64,11 @@ TELESRV_LANGPACK_SEED_DIR=data/langpack
 TELESRV_BLOB_DIR=data/blobs
 TELESRV_STICKER_SEED_DIR=data/sticker-seed
 
-# Optional sticker/custom emoji/chatlist landing endpoint.
-# Public canonical URLs use TELESRV_PUBLIC_BASE_URL.
+# Optional public-link Web listener for /<username>, profile avatars,
+# sticker/custom emoji sets, and shared folders. This is a host:port bind
+# address without a URL scheme. It is not replaced by TELESRV_PUBLIC_BASE_URL.
+# Production should keep it on loopback and reverse-proxy the documented routes
+# through nginx; public canonical URLs use TELESRV_PUBLIC_BASE_URL.
 TELESRV_PUBLIC_LINK_WEB_ADDR=127.0.0.1:2401
 
 # AI compose for TDesktop/Android input box rewrite/polish.