Core settings (database credentials, API keys, SMTP) are configured in the .env file on the server. Runtime settings below can be changed here.