# `security.json` — security remote control (canonical)

## Production URL

Upload this file to:

**`https://adneutral.link/config/security.json`**

The MatchGrid app loads **only** this URL (flat JSON at the root: `enabled`, `checks`, …).

## Override URL (optional)

In `.env` or `app_config.json` → `env`:

```json
"SECURITY_CONFIG_URL": "https://adneutral.link/config/security.json"
```

Or keep `REMOTE_CONFIG_URL=https://adneutral.link/config/` — the app appends `security.json`.

## Edit checklist

1. Change fields in `server-config/security.json`.
2. Upload to `https://adneutral.link/config/security.json`.
3. Open the app on a test device (or wait ~60–120 s).

Master switch: `"enabled": true | false`  
Private DNS block: `"checks": { "dns_adblocker": true | false }`