diff --git a/accounts/mischa.yaml b/accounts/mischa.yaml
index aaae62e..6be01ab 100644
--- a/accounts/mischa.yaml
+++ b/accounts/mischa.yaml
@@ -10,10 +10,12 @@ admin_next:
   preferences:
     pluginsViewMode: cards
     colorMode: dark
-    accentHue: 271
-    accentSaturation: 91
-    fontFamily: inter
+    accentHue: 38
+    accentSaturation: 92
+    fontFamily: public-sans
     pagesViewMode: tree
+    fontSize: large
+    editorMode: normal
 content_editor: ''
 groups: {  }
 access:
diff --git a/env/intotheeast.com/config/plugins/api-private.php b/env/intotheeast.com/config/plugins/api-private.php
new file mode 100644
index 0000000..1e07a37
--- /dev/null
+++ b/env/intotheeast.com/config/plugins/api-private.php
@@ -0,0 +1,7 @@
+<?php
+
+// Auto-generated private secret. Do NOT commit to version control.
+// Used to sign and verify API JWTs. Regenerate by deleting this file; the
+// next request will write a new value (invalidating all existing tokens).
+
+return 'b24a28b949941d16ef856a957f051831184a82ec15229dcd630183518bd0bca2';
diff --git a/env/intotheeast.com/config/plugins/git-sync.yaml b/env/intotheeast.com/config/plugins/git-sync.yaml
new file mode 100644
index 0000000..bb62dbd
--- /dev/null
+++ b/env/intotheeast.com/config/plugins/git-sync.yaml
@@ -0,0 +1,33 @@
+enabled: true
+folders:
+  - pages
+  - config
+  - themes
+local_repository: ''
+repository: 'https://git.gorinskat.nl/m038/intotheeast-com-content.git'
+no_user: false
+user: into-the-east-grav-sync
+webhook: /_git-sync
+webhook_enabled: 1
+webhook_secret: '/RX{_*lU]dF&y_Pd!h+EZWjMP1{Np>$z>\%+G''Jo'
+branch: main
+logging: false
+password: gitsync-def502005b5427cc6afd28ea66682788711e72b3e31bcb6bd302db4232e48a8783900ed76bf2cf891b3e4545dd925a5f5276fa683bf033797b5c6074f7ef0c520c455e34e27392be46615378e779cba61fe4a7f710fcbf157fb9709142794bce7d785e3738de84dd6887e0287f2923e96ae12ce446e4e61285a3ce48
+sync:
+  direction: both
+  on_save: true
+  on_delete: true
+  on_media: true
+  cron_enable: false
+  cron_at: '0 12,23 * * *'
+remote:
+  name: origin
+  branch: main
+git:
+  author: gituser
+  message: '(Grav GitSync) Automatic Commit'
+  name: GitSync
+  email: mischa@gorinskat.nl
+  bin: git
+  ignore: ''
+  private_key: ''
diff --git a/env/intotheeast.com/config/security-private.php b/env/intotheeast.com/config/security-private.php
new file mode 100644
index 0000000..d185898
--- /dev/null
+++ b/env/intotheeast.com/config/security-private.php
@@ -0,0 +1,7 @@
+<?php
+
+// Auto-generated private secret. Do NOT commit to version control.
+// Used for CSRF nonce signing and admin rate-limit hashing. Regenerate by
+// deleting this file; the next request will write a new value.
+
+return '7b82d740b30aafea06c98ee539ff5c2f1800cbd60f07754d131db7d80e687068';
diff --git a/env/intotheeast.com/config/system.yaml b/env/intotheeast.com/config/system.yaml
new file mode 100644
index 0000000..a859bf9
--- /dev/null
+++ b/env/intotheeast.com/config/system.yaml
@@ -0,0 +1,38 @@
+# Production-only Grav config overrides.
+#
+# Deep-merged OVER the committed user/config/system.yaml via Grav's
+# per-environment config mechanism: on the server this file is deployed to
+#   <webroot>/user/env/<hostname>/config/system.yaml
+# and Grav's `environment://config` stream (keyed on the request hostname)
+# layers it on top of `user://config`.
+#
+# These values are deliberately NOT in the committed system.yaml because they
+# would break local development (see CLAUDE.md §1 — dev keeps twig.cache:false
+# so theme edits take effect immediately). Prod is the only place they apply.
+#
+# Deploy with:  make remote-apply-env-prod
+# The user/env/ tree is outside the content repo's tracked folders, so it is
+# NOT restored by content-push / git-sync / remote-fetch-content — re-run the
+# target above after any fresh install.
+twig:
+  cache: true
+  debug: false
+  auto_reload: false
+
+# Compression / connection handling.
+#
+# This host is not FastCGI (no fastcgi_finish_request()), so Grav's shutdown
+# "early connection close" falls back to emitting `Content-Encoding: identity`
+# to ask the webserver not to compress. But Apache's mod_deflate compresses
+# anyway and adds `Content-Encoding: gzip`, giving TWO conflicting headers —
+# the browser can't decode the body and renders raw gzip bytes (a garbage
+# page). Note: allow_webserver_gzip:true takes the SAME identity branch, so it
+# does not help. The real fix is to disable the early-close path, so Grav never
+# emits the bogus header and mod_deflate compresses cleanly (single header).
+debugger:
+  shutdown:
+    close_connection: false
+# Let the webserver own gzip; Grav does not compress or double-label.
+cache:
+  gzip: false
+  allow_webserver_gzip: false
diff --git a/pages/02.post/post-form.md b/pages/02.post/post-form.md
index c8431ea..7366bac 100644
--- a/pages/02.post/post-form.md
+++ b/pages/02.post/post-form.md
@@ -1,19 +1,15 @@
 ---
-title: 'New Entry'
+title: 'New journal entry'
 template: post-form
 access:
     site.login: true
-
-# Keep in sync with active_trip in user/config/site.yaml
 pageconfig:
-    parent: '/trips/italy-2026-demo/dailies'
+    parent: /trips/italy-2026-demo/dailies
     slug_field: 'date,title'
     overwrite_mode: false
-
 pagefrontmatter:
     template: entry
     published: true
-
 form:
     name: new-entry
     action: /post
@@ -26,77 +22,66 @@ form:
             autofocus: true
             validate:
                 required: true
-
         -
             name: date
-            label: Date & Time
+            label: 'Date & Time'
             type: datetime
             default: now
             format: 'Y-m-d H:i'
             validate:
                 required: true
-
         -
             name: content
-            label: "What happened today?"
+            label: 'What happened today?'
             type: textarea
             rows: 10
             validate:
                 required: true
-
         -
             name: photos
-            label: Photos (max 4)
+            label: 'Photos (max 4)'
             type: filepond
             multiple: true
             destination: '@self'
             limit: 4
             accept:
                 - 'image/*'
-
         -
             name: lat
             label: Latitude
             type: text
             placeholder: 'tap "Get Location" below'
-
         -
             name: lng
             label: Longitude
             type: text
             placeholder: ''
-
         -
             name: location_city
             label: City
             type: text
             placeholder: 'e.g. Kyoto'
-
         -
             name: location_country
             label: Country
             type: text
             placeholder: 'e.g. Japan'
-
         -
             name: weather_temp_c
             type: hidden
-
         -
             name: weather_desc
             type: hidden
-
     novalidate: true
-
     buttons:
         -
             type: submit
-            value: Post Daily
+            value: 'Post Daily'
             classes: btn-post
-
     process:
         add_page: true
         upload: true
         message: 'Entry posted successfully!'
         reset: true
 ---
+