From f0912ee838e72b4bedd567d0110fa840820ddf18 Mon Sep 17 00:00:00 2001
From: Dax Raad <d@ironbay.co>
Date: Mon, 12 Jan 2026 15:59:17 -0500
Subject: core: rename OPENCODE_PASSWORD to OPENCODE_SERVER_PASSWORD for
 clearer authentication configuration

---
 packages/web/src/content/docs/server.mdx | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'packages/web/src/content/docs/server.mdx')

diff --git a/packages/web/src/content/docs/server.mdx b/packages/web/src/content/docs/server.mdx
index a123acb15..7229e09b2 100644
--- a/packages/web/src/content/docs/server.mdx
+++ b/packages/web/src/content/docs/server.mdx
@@ -35,10 +35,10 @@ opencode serve --cors http://localhost:5173 --cors https://app.example.com
 
 ### Authentication
 
-Set `OPENCODE_PASSWORD` to protect the server with HTTP basic auth. The username is always `opencode`, and the password is the value of `OPENCODE_PASSWORD`. This applies to both `opencode serve` and `opencode web`.
+Set `OPENCODE_SERVER_PASSWORD` to protect the server with HTTP basic auth. The username defaults to `opencode`, or set `OPENCODE_SERVER_USERNAME` to override it. This applies to both `opencode serve` and `opencode web`.
 
 ```bash
-OPENCODE_PASSWORD=your-password opencode serve
+OPENCODE_SERVER_PASSWORD=your-password opencode serve
 ```
 
 ---
-- 
cgit v1.2.3

