diff --git a/lib/auth.ts b/lib/auth.ts
index 2b4803e..3f4034e 100644
--- a/lib/auth.ts
+++ b/lib/auth.ts
@@ -2,6 +2,7 @@ import NextAuth from "next-auth"
 import CredentialsProvider from "next-auth/providers/credentials"
 
 export const { handlers, auth, signIn, signOut } = NextAuth({
+  secret: process.env.AUTH_SECRET || process.env.NEXTAUTH_SECRET,
   providers: [
     CredentialsProvider({
       name: "Credentials",
@@ -10,19 +11,21 @@ export const { handlers, auth, signIn, signOut } = NextAuth({
         password: { label: "Password", type: "password" }
       },
       async authorize(credentials) {
-        // Boilerplate mock logic
-        // TODO: In production, lookup user in Prisma and verify password using bcrypt
-        // const user = await db.user.findUnique({ where: { email: credentials.email } })
-        
-        if (credentials?.email === "admin@ayris.tech" && credentials?.password === "admin") {
+        const adminEmail = process.env.ADMIN_EMAIL || "admin@ayris.tech";
+        const adminPassword = process.env.ADMIN_PASSWORD || "admin";
+
+        if (
+          credentials?.email === adminEmail &&
+          credentials?.password === adminPassword
+        ) {
           return {
             id: "1",
-            name: "Admin User",
-            email: "admin@ayris.tech",
+            name: "Admin",
+            email: adminEmail,
             role: "ADMIN"
           }
         }
-        
+
         return null
       }
     })
@@ -42,6 +45,8 @@ export const { handlers, auth, signIn, signOut } = NextAuth({
     }
   },
   pages: {
-    signIn: '/login'
-  }
+    signIn: '/login',
+    error: '/login',
+  },
+  trustHost: true,
 })