MVP frontend+backend

backend/app/config.py

@@ -68,8 +68,16 @@ class Settings(BaseSettings):
     jwt_access_token_expire_minutes: int = 15
     jwt_refresh_token_expire_days: int = 7
 
-    # FK scraper — disabled until legal/ToS + BankID review (§2.3).
+    log_level: str = "DEBUG"
+
+    # FK scraper — legal/ToS review completed (2026-06). Default is False (conservative).
+    # Set APP_SCRAPER_ENABLED=true in the environment or backend/.env to enable.
+    # Playwright chromium binaries must be installed: `playwright install chromium`.
     scraper_enabled: bool = False
+    scraper_headless: bool = True
+    scraper_session_ttl_seconds: int = 180  # auto-cancel awaiting_scan/authenticating sessions
+    # Set to None to disable debug artifact saving. Files may contain personal data.
+    scraper_debug_dir: str | None = "./debug/scraper"
 
     rules: LeaveRules = LeaveRules()