diff --git a/videoplayer.py b/videoplayer.py
index 09ed417..66d0eb5 100644
--- a/videoplayer.py
+++ b/videoplayer.py
@@ -24,11 +24,6 @@ from flask import (
 # Load variables from a .env file if present (does not override real env vars)
 load_dotenv()
 
-app = Flask(__name__)
-
-# Session secret key — MUST be set in production. Generate with: python -c "import secrets; print(secrets.token_hex(32))"
-app.secret_key = os.environ.get('SECRET_KEY', secrets.token_hex(32))
-
 # Password for web login. Default: 'patreon'. Override via LOGIN_PASSWORD env var.
 LOGIN_PASSWORD = os.environ.get('LOGIN_PASSWORD', 'patreon')
 
@@ -36,6 +31,11 @@ LOGIN_PASSWORD = os.environ.get('LOGIN_PASSWORD', 'patreon')
 # Override via the TESLACAM_DIRECTORY environment variable (see .env.example).
 TESLACAM_DIRECTORY = os.environ.get('TESLACAM_DIRECTORY', '/mnt/TeslaCam')
 
+app = Flask(__name__)
+
+# Session secret key — MUST be set in production. Generate with: python -c "import secrets; print(secrets.token_hex(32))"
+app.secret_key = os.environ.get('SECRET_KEY', secrets.token_hex(32))
+
 # Regular expression matching TeslaCam filenames: YYYY-MM-DD_HH-MM-SS-${camera_view}.mp4
 VIDEO_FILENAME_REGEX = re.compile(
     r'^(\d{4}-\d{2}-\d{2}_\d{2}-\d{2}-\d{2})-(\w+)\.mp4$'