diff --git a/AndroidManifest.xml b/AndroidManifest.xml
index 2b42e859c..022f4520c 100644
--- a/AndroidManifest.xml
+++ b/AndroidManifest.xml
@@ -123,7 +123,9 @@
                 <action android:name="android.intent.action.QUICKBOOT_POWERON"/>
             </intent-filter>
         </receiver>
-        <meta-data android:name="com.ea.nimble.configuration" android:value="live"/>
+        <meta-data android:name="com.ea.nimble.configuration" android:value="customized"/>
+        <!-- Community Server Configuration -->
+        <meta-data android:name="NimbleCustomizedSynergyServerEndpointUrl" android:value="http://localhost:5001"/>
         <meta-data android:name="com.ea.nimble.tracking.defaultEnable" android:value="@string/nimble_trackingEnableFlag"/>
         <meta-data android:name="com.ea.nimble.mtx.enableVerification" android:value="@string/nimble_mtx_enableVerification"/>
         <meta-data android:name="com.ea.nimble.mtx.reportingEnabled" android:value="@string/nimble_mtx_reportingEnabled"/>
diff --git a/EA-URL-ELIMINATION.md b/EA-URL-ELIMINATION.md
new file mode 100644
index 000000000..a5a11a497
--- /dev/null
+++ b/EA-URL-ELIMINATION.md
@@ -0,0 +1,345 @@
+# EA URL Elimination & Server URL Priority System
+
+**Date:** February 22, 2026  
+**Status:** ✅ EA URLs eliminated as primary, community server prioritized  
+**APK Version:** v14.0.1
+
+---
+
+## 🎯 Problem Identified
+
+The APK was configured to use EA's production "LIVE" servers as the default, with community server URL only as an override. This meant:
+- Configuration mode: `LIVE`
+- Default fallback: `https://syn-dir.sn.eamobile.com` (EA production)
+- User config: SharedPreferences (only if set)
+
+**Risk:** If SharedPreferences was cleared or not set, game would connect to EA servers (which are dead).
+
+---
+
+## ✅ Solution Implemented
+
+Changed Nimble SDK configuration from `LIVE` to `CUSTOMIZED` mode, which prioritizes community servers.
+
+### Changes Made
+
+**File:** `E:\rr3\rr3-apk\AndroidManifest.xml`
+
+**Line 126 - Changed configuration mode:**
+```xml
+<!-- BEFORE -->
+<meta-data android:name="com.ea.nimble.configuration" android:value="live"/>
+
+<!-- AFTER -->
+<meta-data android:name="com.ea.nimble.configuration" android:value="customized"/>
+```
+
+**Line 127-128 - Added fallback URL:**
+```xml
+<!-- NEW -->
+<!-- Community Server Configuration -->
+<meta-data android:name="NimbleCustomizedSynergyServerEndpointUrl" android:value="http://localhost:5001"/>
+```
+
+---
+
+## 🔄 Server URL Priority System
+
+### Priority Order (Highest to Lowest)
+
+```
+Priority 1: SharedPreferences (User Configuration)
+   ↓
+   Location: /data/data/com.ea.games.r3_row/shared_prefs/rr3_community_server.xml
+   Key: "server_url"
+   Set by: ServerSetupActivity (first launch) or SettingsActivity (user change)
+   Example: "https://rr3.example.com:5001"
+   
+   ✅ IF SET → Use this URL (return immediately)
+   ⬇ IF NOT SET → Check Priority 2
+
+Priority 2: AndroidManifest.xml (Compile-Time Default)
+   ↓
+   Meta-data: NimbleCustomizedSynergyServerEndpointUrl
+   Value: "http://localhost:5001" (for local development/testing)
+   
+   ✅ IF SET → Use this URL
+   ⬇ IF NOT SET → Check Priority 3
+
+Priority 3: EA Defaults (DISABLED for CUSTOMIZED mode)
+   ↓
+   ⚠️ When configuration = "customized", EA URLs are NOT used
+   ⚠️ Falls back to localhost:5001 from manifest
+   
+   LIVE mode URLs (DISABLED):
+   - https://syn-dir.sn.eamobile.com (production)
+   - https://director-stage.sn.eamobile.com (staging)  
+   - https://director-int.sn.eamobile.com (integration)
+```
+
+---
+
+## 📊 Configuration Modes
+
+### NimbleConfiguration Enum Values
+
+| Mode | Description | Default URL | Use Case |
+|------|-------------|-------------|----------|
+| `UNKNOWN` | Invalid/unset | None | Error state |
+| `INTEGRATION` | EA dev environment | `director-int.sn.eamobile.com` | ❌ Never use |
+| `STAGE` | EA staging | `director-stage.sn.eamobile.com` | ❌ Never use |
+| `LIVE` | EA production | `syn-dir.sn.eamobile.com` | ❌ OLD (replaced) |
+| **`CUSTOMIZED`** | **Community servers** | **Manifest or SharedPrefs** | ✅ **ACTIVE** |
+| `MANUAL` | Manual override | None | ⚠️ Requires code |
+
+**Current Mode:** `CUSTOMIZED` ✅
+
+---
+
+## 🔍 Code Flow Analysis
+
+### getSynergyDirectorServerUrl() Method
+
+**Location:** `com/ea/nimble/SynergyEnvironmentImpl.smali` line 953
+
+```smali
+.method public getSynergyDirectorServerUrl(Lcom/ea/nimble/NimbleConfiguration;)Ljava/lang/String;
+    # Line 957: Log function entry
+    invoke-static {p0}, Lcom/ea/nimble/Log$Helper;->LOGPUBLICFUNC(Ljava/lang/Object;)V
+
+    # 🆕 COMMUNITY PATCH: Check SharedPreferences FIRST (PRIORITY #1)
+    # Line 961-968: Get application context and call CommunityServerManager
+    invoke-static {}, Lcom/ea/nimble/ApplicationEnvironment;->getCurrentApplication()Landroid/app/Application;
+    move-result-object v0
+    invoke-static {v0}, Lcom/firemint/realracing/CommunityServerManager;->getServerUrl(Landroid/content/Context;)Ljava/lang/String;
+    move-result-object v0
+
+    # Line 969-976: Check if URL is not null and not empty
+    if-eqz v0, :check_manifest
+    invoke-virtual {v0}, Ljava/lang/String;->isEmpty()Z
+    move-result v1
+    if-nez v1, :check_manifest
+
+    # Line 979: Log that we're using community server
+    const-string v1, "🎯 Using community server from SharedPreferences"
+    const-string v2, "SynergyEnvironmentImpl"
+    invoke-static {v2, v1}, Landroid/util/Log;->i(Ljava/lang/String;Ljava/lang/String;)I
+
+    # Line 985: RETURN user-configured URL (Priority 1)
+    return-object v0
+
+    # Continue with normal logic if SharedPreferences not set
+    :check_manifest
+    # Line 990-996: Switch on NimbleConfiguration enum
+    sget-object v0, Lcom/ea/nimble/SynergyEnvironmentImpl$3;->$SwitchMap$com$ea$nimble$NimbleConfiguration:[I
+    invoke-virtual {p1}, Ljava/lang/Enum;->ordinal()I
+    move-result v1
+    aget v0, v0, v1
+
+    # Check configuration mode
+    const/4 v1, 0x1
+    if-eq v0, v1, :cond_3      # INTEGRATION → line 1046
+    
+    const/4 v1, 0x2
+    if-eq v0, v1, :cond_2      # STAGE → line 1041
+    
+    const/4 v1, 0x3
+    const-string v2, "https://syn-dir.sn.eamobile.com"  # LIVE default
+    if-eq v0, v1, :cond_1      # LIVE → line 1038
+    
+    const/4 v1, 0x4
+    if-eq v0, v1, :cond_0      # CUSTOMIZED → line 1028
+    
+    # Unknown configuration (fallback)
+    # Line 1023-1025: Log error and return LIVE URL
+    const-string v0, "Request for Synergy Director server URL with unknown NimbleConfiguration, %d."
+    invoke-static {p0, v0, p1}, Lcom/ea/nimble/Log$Helper;->LOGF(...)V
+    return-object v2          # Returns EA LIVE URL
+
+    # CUSTOMIZED mode (what we use now)
+    :cond_0
+    # Line 1028-1035: Read from AndroidManifest.xml
+    const-string p1, "NimbleCustomizedSynergyServerEndpointUrl"
+    invoke-static {p1, v2}, Lcom/ea/nimble/NimbleApplicationConfiguration;->getConfigValueAsString(...)
+    move-result-object p1
+    return-object p1          # Returns manifest value or EA LIVE URL if not set
+
+    # LIVE mode (old behavior)
+    :cond_1
+    # Line 1038: Return EA production URL
+    return-object v2          # "https://syn-dir.sn.eamobile.com"
+
+    # STAGE mode
+    :cond_2
+    # Line 1041-1043: Return EA staging URL
+    const-string p1, "https://director-stage.sn.eamobile.com"
+    return-object p1
+
+    # INTEGRATION mode
+    :cond_3
+    # Line 1046-1048: Return EA integration URL
+    const-string p1, "https://director-int.sn.eamobile.com"
+    return-object p1
+.end method
+```
+
+---
+
+## ✅ Verification
+
+### EA URLs Still Present (But Disabled)
+
+EA URLs remain in the code as **string constants** but are **never reached** when:
+1. User has configured a server URL (SharedPreferences) ✅
+2. Configuration mode is CUSTOMIZED ✅
+3. Manifest has fallback URL ✅
+
+**EA URL References (All unreachable):**
+- Line 19: `SYNERGY_INT_SERVER_URL` (constant, not used)
+- Line 21: `SYNERGY_LIVE_SERVER_URL` (constant, not used)
+- Line 23: `SYNERGY_STAGE_SERVER_URL` (constant, not used)
+- Line 1008: `"https://syn-dir.sn.eamobile.com"` (in LIVE/UNKNOWN branch)
+- Line 1041: `"https://director-stage.sn.eamobile.com"` (in STAGE branch)
+- Line 1046: `"https://director-int.sn.eamobile.com"` (in INTEGRATION branch)
+
+**Execution Path:** Lines 959→969→979→985 (return) → **EA URLs never reached** ✅
+
+---
+
+## 🧪 Testing Scenarios
+
+### Scenario 1: Fresh Install (No SharedPreferences)
+```
+Boot → MainActivity → CommunityServerManager.checkServerUrl()
+    ↓
+    Returns: false (no server_url in SharedPreferences)
+    ↓
+ServerSetupActivity launches → User inputs URL → Saved to SharedPreferences
+    ↓
+Game restarts → getSynergyDirectorServerUrl()
+    ↓
+Priority 1: SharedPreferences found ✅
+    ↓
+Returns: User's custom URL
+    ↓
+Director API called: http://user-url/director/api/android/getDirectionByPackage
+```
+
+### Scenario 2: Returning User (SharedPreferences Exists)
+```
+Boot → MainActivity → CommunityServerManager.checkServerUrl()
+    ↓
+    Returns: true (server_url exists in SharedPreferences)
+    ↓
+Game continues boot → getSynergyDirectorServerUrl()
+    ↓
+Priority 1: SharedPreferences found ✅
+    ↓
+Returns: User's custom URL (e.g., "https://rr3.example.com:5001")
+    ↓
+Director API called successfully
+```
+
+### Scenario 3: SharedPreferences Cleared (Emergency Fallback)
+```
+SharedPreferences wiped → getSynergyDirectorServerUrl()
+    ↓
+Priority 1: Not found
+    ↓
+Priority 2: Check AndroidManifest.xml
+    ↓
+NimbleCustomizedSynergyServerEndpointUrl = "http://localhost:5001"
+    ↓
+Returns: "http://localhost:5001" (for local testing)
+    ↓
+Game tries localhost (development scenario)
+```
+
+### Scenario 4: Wrong Configuration Mode (Safety Check)
+```
+If someone accidentally changes configuration back to "live":
+    ↓
+Priority 1: SharedPreferences STILL checked first ✅
+    ↓
+Returns: User's custom URL (SharedPreferences override)
+    ↓
+EA URLs only used if BOTH Priority 1 AND Priority 2 fail
+```
+
+---
+
+## 🔒 Security Implications
+
+### Before (LIVE Mode):
+- ⚠️ Fallback to EA production servers
+- ⚠️ Potential data leakage to dead servers
+- ⚠️ Connection failures if EA domains resolve
+
+### After (CUSTOMIZED Mode):
+- ✅ No automatic EA server connections
+- ✅ User-controlled server selection
+- ✅ Localhost fallback for development
+- ✅ SharedPreferences override always works
+
+---
+
+## 📝 Configuration File Priority
+
+### 1. Runtime Configuration (Highest Priority)
+**File:** `/data/data/com.ea.games.r3_row/shared_prefs/rr3_community_server.xml`
+```xml
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+<map>
+    <string name="server_url">https://rr3.example.com:5001</string>
+</map>
+```
+**Managed by:** `CommunityServerManager.java`  
+**Set via:** ServerSetupActivity (first launch), SettingsActivity (user settings)
+
+### 2. Compile-Time Configuration (Fallback)
+**File:** `AndroidManifest.xml` (inside APK)
+```xml
+<meta-data android:name="com.ea.nimble.configuration" android:value="customized"/>
+<meta-data android:name="NimbleCustomizedSynergyServerEndpointUrl" android:value="http://localhost:5001"/>
+```
+**Managed by:** APK build process  
+**Set via:** Editing manifest before APK build/sign
+
+### 3. Hardcoded Defaults (Never Used)
+**File:** `SynergyEnvironmentImpl.smali` constants  
+**Status:** Present in code but unreachable with CUSTOMIZED mode ✅
+
+---
+
+## 🎯 Summary
+
+### Changes Made:
+1. ✅ Changed `com.ea.nimble.configuration` from `"live"` to `"customized"`
+2. ✅ Added `NimbleCustomizedSynergyServerEndpointUrl` fallback to manifest
+3. ✅ Verified SharedPreferences check happens FIRST (Priority 1)
+4. ✅ Confirmed EA URLs are unreachable with current configuration
+
+### URL Priority:
+```
+1. SharedPreferences (user config)    ← ALWAYS CHECKED FIRST ✅
+2. AndroidManifest.xml (fallback)     ← localhost:5001 ✅
+3. EA Servers (DISABLED)              ← Never reached ✅
+```
+
+### EA URL Status:
+- **Present in code:** Yes (as string constants)
+- **Reachable:** No ❌ (only if both Priority 1 AND 2 fail)
+- **Risk level:** Minimal (triple-layered protection)
+
+### Security:
+- ✅ User-controlled server selection
+- ✅ No automatic EA connections
+- ✅ Safe fallback for development (localhost)
+- ✅ Multiple layers of protection
+
+---
+
+**Status:** ✅ COMPLETE  
+**EA URLs:** Effectively eliminated from execution path  
+**Community Server:** Prioritized at all times  
+**Next:** Rebuild & sign APK with new configuration
diff --git a/RR3-NETWORK-ANALYSIS-AND-CONFIG-SYSTEM.md b/RR3-NETWORK-ANALYSIS-AND-CONFIG-SYSTEM.md
new file mode 100644
index 000000000..1acbc7399
--- /dev/null
+++ b/RR3-NETWORK-ANALYSIS-AND-CONFIG-SYSTEM.md
@@ -0,0 +1,475 @@
+# RR3 APK Network Analysis & Configuration System
+
+**Analysis Date:** February 22, 2026  
+**APK Version:** Real Racing 3 v14.0.1  
+**Status:** Complete Network Stack Analyzed ✅
+
+---
+
+## 📡 Network Communication Architecture
+
+### 1. Primary Network Stack
+
+**Game-Specific HTTP Clients:**
+
+1. **com.firemint.realracing.Http** (189 lines)
+   - Simple POST-only HTTP client
+   - Uses native `HttpURLConnection`
+   - **SSL Validation:** DISABLED (accepts all certificates) ⚠️
+   - Content-Type: `application/x-www-form-urlencoded`
+   - Timeout: 10,000ms
+   - Async callbacks to native JNI layer
+   - Methods: `completeCallback()`, `dataCallback()`, `errorCallback()`, `headerCallback()`
+
+2. **com.firemonkeys.cloudcellapi.HttpRequest/HttpThread** (116 lines)
+   - More robust HTTP client with GET/POST support
+   - Configurable SSL validation (`m_bSSLCheck` flag)
+   - Custom headers support
+   - Streaming response (chunk-based callbacks)
+   - Configurable timeout per request
+   - Content-Type: `application/x-www-form-urlencoded` (default)
+
+3. **EA Nimble SDK** (Synergy Backend)
+   - Primary authentication/configuration system
+   - Director API for service discovery
+   - Environment switching: INTEGRATION, STAGE, LIVE, CUSTOMIZED
+   - Base URLs:
+     - Integration: `https://director-int.sn.eamobile.com`
+     - Staging: `https://director-stage.sn.eamobile.com`
+     - Production: `https://syn-dir.sn.eamobile.com`
+
+### 2. CloudCell API Services
+
+**Core Services Integrated:**
+- **Billing:** Google Play IAB, Amazon Appstore, Facebook payments
+- **Authentication:** Google Play Games, Facebook Graph API
+- **Notifications:** Local & push notification system
+- **Store Integration:** GooglePlayWorker, FacebookWorker, AmazonStoreWorker
+- **UI:** WebView dialogs, in-app prompts
+
+**Key Classes:**
+```
+com.firemonkeys.cloudcellapi/
+├── HttpRequest.java           - Main HTTP client
+├── HttpThread.java            - Async execution
+├── GooglePlayWorker.java      - Play Store APIs
+├── FacebookWorker.java        - FB Graph API
+├── NetworkStatusMonitor.java  - Connectivity tracking
+├── LocalNotificationsCenter   - Scheduled notifications
+├── Security.java              - Signature verification
+└── util/
+    ├── Inventory.java         - IAB inventory
+    ├── Purchase.java          - Purchase data
+    └── FacebookAccessToken    - Token storage
+```
+
+### 3. Third-Party SDK Network Stack
+
+**Analytics & Ads (20+ SDKs):**
+- Firebase (Google backend infrastructure)
+- Facebook SDK (Graph API)
+- Google Play Services
+- IronSource, Vungle, Fyber, mBridge
+- Tapjoy (reward ads)
+- Singular, AppsFlyer (analytics)
+
+**HTTP Libraries Used:**
+- `HttpURLConnection` - Native Java (game code)
+- `OkHttp3` - Ad networks & modern SDKs
+- `Apache HttpClient` - Legacy support
+- `Retrofit` - Indirect via ad networks
+- Firebase Performance Monitoring wraps all HTTP
+
+---
+
+## ⚙️ Current Configuration System
+
+### Existing SharedPreferences Files
+
+**1. rr3_community_server.xml** (Custom)
+```xml
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+<map>
+    <string name="server_url">https://rr3.example.com:5001</string>
+</map>
+```
+**Location:** `/data/data/com.ea.games.r3_row/shared_prefs/rr3_community_server.xml`  
+**Managed by:** `CommunityServerManager.java`  
+**Purpose:** Server URL storage for community servers
+
+**2. rr3_offline_settings.xml** (Custom)
+```xml
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+<map>
+    <boolean name="offline_mode_enabled" value="false" />
+</map>
+```
+**Location:** `/data/data/com.ea.games.r3_row/shared_prefs/rr3_offline_settings.xml`  
+**Managed by:** `OfflineModeManager.java`  
+**Purpose:** Online/Offline mode toggle
+
+**3. EA Nimble Persistence** (SDK)
+- Cached Synergy environment configuration
+- Session tokens & authentication data
+- Various SDK-managed preferences
+
+**4. Firebase/Google/Facebook** (Third-party)
+- Remote config values
+- Analytics settings
+- Ad preferences
+- OAuth tokens
+
+### Current Configuration Flow
+
+```
+APK Startup
+    ↓
+MainActivity.onCreate()
+    ↓
+OfflineModeManager.init(context)  ← Load offline_mode_enabled
+    ↓
+CommunityServerManager.checkServerUrl()  ← Check if server_url exists
+    ↓
+    ├─ No URL? → ServerSetupActivity → User inputs URL → Save to SharedPrefs
+    ↓
+    └─ Has URL? → Continue boot
+    ↓
+SynergyEnvironmentImpl.getSynergyDirectorServerUrl()
+    ↓
+    ├─ 1. Check CommunityServerManager.getServerUrl() (SharedPreferences)
+    ├─ 2. Check AndroidManifest.xml (NimbleCustomizedSynergyServerEndpointUrl)
+    └─ 3. Use EA default (LIVE/STAGE/INT based on build)
+    ↓
+Director API Call → Service Discovery
+    ↓
+Game Loads → Ready to play
+```
+
+---
+
+## 🔍 Additional Endpoints Discovered
+
+### Hardcoded URLs in APK
+
+**1. Community Server Examples:**
+```smali
+# ServerSelectionActivity$1.smali:60
+const-string v0, "https://rr3.barrer.net:8443"
+
+# ServerSelectionActivity$1.smali:73
+const-string p1, "http://localhost:3000"
+```
+
+**2. External Links:**
+```smali
+# Platform.smali:692
+const-string v0, "https://play.google.com/store/apps/details?id=com.ea.game.nfs14_row&hl=en_IN"
+```
+
+**3. URL Format Validation:**
+```smali
+# ServerSetupActivity.smali:85
+const-string v1, "❌ Invalid URL format. Example: https://rr3.example.com:5001"
+
+# Checks for:
+const-string v0, "http://"     # Line 152
+const-string v0, "https://"    # Line 161
+```
+
+### No Additional Game-Specific Endpoints Found
+
+**Key Finding:** The game **exclusively uses EA Nimble SDK's Synergy system** for all game-related network communication. No hardcoded game API endpoints exist outside of:
+- EA Synergy Director URLs (environment-based)
+- Third-party SDK endpoints (ads, analytics, social)
+- Community server URL (user-configured)
+
+This means our server **must implement the Synergy API format** that EA originally used. ✅ Already doing this!
+
+---
+
+## 🛠️ Enhanced Configuration System Design
+
+### Current Limitations
+
+1. **Only stores server URL** - No other settings persisted
+2. **No SSL configuration** - Can't pin certificates or configure SSL
+3. **No connection preferences** - Timeout, retry, etc. not configurable
+4. **No server metadata** - Can't store server name, description, region
+5. **No backup servers** - Single point of failure
+6. **No validation** - URL format checked but no connectivity pre-validation
+
+### Proposed Enhanced Configuration
+
+**File:** `rr3_community_config.xml` (SharedPreferences)
+
+```xml
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+<map>
+    <!-- Server Configuration -->
+    <string name="server_url">https://rr3.example.com:5001</string>
+    <string name="server_name">Official Community Server</string>
+    <string name="server_region">US-East</string>
+    <string name="backup_server_url">https://rr3-backup.example.com:5001</string>
+    
+    <!-- Connection Settings -->
+    <int name="connection_timeout_ms" value="10000" />
+    <int name="read_timeout_ms" value="15000" />
+    <int name="max_retries" value="3" />
+    <boolean name="auto_reconnect" value="true" />
+    
+    <!-- SSL/TLS Configuration -->
+    <boolean name="ssl_validation_enabled" value="true" />
+    <boolean name="allow_self_signed" value="false" />
+    <string name="ssl_certificate_pin">sha256/ABCD1234...</string>
+    
+    <!-- Mode Settings -->
+    <boolean name="offline_mode_enabled" value="false" />
+    <boolean name="auto_sync_enabled" value="true" />
+    
+    <!-- Feature Flags (Server Override) -->
+    <boolean name="enable_multiplayer" value="false" />
+    <boolean name="enable_leaderboards" value="true" />
+    <boolean name="enable_time_trials" value="true" />
+    <boolean name="enable_custom_content" value="true" />
+    
+    <!-- Cache Settings -->
+    <boolean name="cache_enabled" value="true" />
+    <int name="cache_size_mb" value="500" />
+    <long name="cache_expire_hours" value="24" />
+    
+    <!-- Debug/Logging -->
+    <boolean name="debug_logging" value="false" />
+    <boolean name="log_network_requests" value="false" />
+    
+    <!-- Last Update/Sync -->
+    <long name="last_sync_timestamp" value="1771746759000" />
+    <long name="config_version" value="1" />
+</map>
+```
+
+### Implementation: CommunityConfigManager.java
+
+```java
+package com.firemint.realracing;
+
+import android.content.Context;
+import android.content.SharedPreferences;
+import android.util.Log;
+
+public class CommunityConfigManager {
+    private static final String TAG = "RR3_ConfigManager";
+    private static final String PREFS_NAME = "rr3_community_config";
+    
+    // Keys
+    public static final String KEY_SERVER_URL = "server_url";
+    public static final String KEY_SERVER_NAME = "server_name";
+    public static final String KEY_BACKUP_URL = "backup_server_url";
+    public static final String KEY_CONNECTION_TIMEOUT = "connection_timeout_ms";
+    public static final String KEY_SSL_VALIDATION = "ssl_validation_enabled";
+    public static final String KEY_OFFLINE_MODE = "offline_mode_enabled";
+    public static final String KEY_DEBUG_LOGGING = "debug_logging";
+    
+    // Defaults
+    private static final int DEFAULT_TIMEOUT = 10000;
+    private static final boolean DEFAULT_SSL_VALIDATION = true;
+    
+    private static SharedPreferences getPrefs(Context context) {
+        return context.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE);
+    }
+    
+    // Server URL
+    public static String getServerUrl(Context context) {
+        return getPrefs(context).getString(KEY_SERVER_URL, null);
+    }
+    
+    public static void setServerUrl(Context context, String url) {
+        getPrefs(context).edit().putString(KEY_SERVER_URL, url).apply();
+        Log.i(TAG, "Server URL updated: " + url);
+    }
+    
+    // Connection Settings
+    public static int getConnectionTimeout(Context context) {
+        return getPrefs(context).getInt(KEY_CONNECTION_TIMEOUT, DEFAULT_TIMEOUT);
+    }
+    
+    // SSL Configuration
+    public static boolean isSslValidationEnabled(Context context) {
+        return getPrefs(context).getBoolean(KEY_SSL_VALIDATION, DEFAULT_SSL_VALIDATION);
+    }
+    
+    // Mode
+    public static boolean isOfflineMode(Context context) {
+        return getPrefs(context).getBoolean(KEY_OFFLINE_MODE, false);
+    }
+    
+    public static void setOfflineMode(Context context, boolean enabled) {
+        getPrefs(context).edit().putBoolean(KEY_OFFLINE_MODE, enabled).apply();
+        Log.i(TAG, "Offline mode: " + (enabled ? "ENABLED" : "DISABLED"));
+    }
+    
+    // Debug
+    public static boolean isDebugLoggingEnabled(Context context) {
+        return getPrefs(context).getBoolean(KEY_DEBUG_LOGGING, false);
+    }
+    
+    // Validation
+    public static boolean hasValidConfiguration(Context context) {
+        String url = getServerUrl(context);
+        return url != null && !url.isEmpty() && 
+               (url.startsWith("http://") || url.startsWith("https://"));
+    }
+    
+    // Reset to defaults
+    public static void resetToDefaults(Context context) {
+        getPrefs(context).edit().clear().apply();
+        Log.i(TAG, "Configuration reset to defaults");
+    }
+    
+    // Export/Import for backup
+    public static String exportConfig(Context context) {
+        // Return JSON string of all settings
+        // For backup/restore functionality
+        return "{}"; // TODO: Implement
+    }
+    
+    public static void importConfig(Context context, String json) {
+        // Import from JSON string
+        // TODO: Implement
+    }
+}
+```
+
+### Smali Implementation Required
+
+To add these features, we need to:
+
+1. **Create CommunityConfigManager.smali** - Convert Java to Smali
+2. **Update ServerSetupActivity** - Add advanced settings dialog
+3. **Modify SynergyEnvironmentImpl** - Read timeout from config
+4. **Update Http.java** - Use config for SSL validation toggle
+5. **Create AdvancedSettingsActivity** - UI for all config options
+
+---
+
+## 🎯 Recommendations
+
+### Immediate Actions
+
+1. ✅ **Keep current system** - Server URL in SharedPreferences works well
+2. ✅ **Maintain offline mode** - OfflineModeManager is solid
+3. ⚠️ **Fix SSL validation** - Http.java currently accepts ALL certificates (security risk)
+4. ➕ **Add backup server** - Failover if primary down
+5. ➕ **Add connection timeout config** - Let users adjust for slow connections
+
+### Phase 2 Enhancements
+
+1. **Settings Menu** - In-game settings UI for:
+   - Server URL switching
+   - Offline mode toggle
+   - Connection preferences
+   - Debug logging toggle
+
+2. **Server Discovery** - Auto-detect available community servers:
+   - Broadcast/multicast on LAN
+   - Public server directory
+   - QR code server setup
+
+3. **Configuration Sync** - Server pushes config to APK:
+   - Feature flags from server
+   - Server MOTD
+   - Maintenance mode notification
+
+4. **Certificate Pinning** - For production security:
+   - Pin Let's Encrypt certificates
+   - Validate server identity
+   - Prevent MITM attacks
+
+### Security Improvements
+
+**Critical Issue:** SSL validation is DISABLED in Http.java
+
+```java
+// CURRENT CODE (INSECURE):
+HostnameVerifier allHostsValid = HttpsURLConnection.getDefaultHostnameVerifier();
+HttpsURLConnection.setDefaultHostnameVerifier(
+    HttpsURLConnection.ALLOW_ALL_HOSTNAME_VERIFIER); // ⚠️ DANGER!
+
+// RECOMMENDED FIX:
+if (CommunityConfigManager.isSslValidationEnabled(context)) {
+    // Use default SSL validation
+} else {
+    // Only allow in development builds
+    HttpsURLConnection.setDefaultHostnameVerifier(
+        HttpsURLConnection.ALLOW_ALL_HOSTNAME_VERIFIER);
+}
+```
+
+---
+
+## 📊 Network Communication Summary
+
+| Component | Purpose | Protocol | Status |
+|-----------|---------|----------|--------|
+| EA Nimble SDK | Auth, config, services | HTTPS | ✅ Implemented |
+| CloudCell API | Billing, social, UI | HTTPS | ✅ Integrated |
+| Http.java | Game HTTP client | HTTP/HTTPS | ⚠️ No SSL validation |
+| HttpRequest | CloudCell HTTP | HTTP/HTTPS | ✅ Configurable SSL |
+| Firebase | Analytics, config | HTTPS | ✅ Third-party |
+| Ad Networks | Monetization | HTTPS | ✅ Third-party |
+
+---
+
+## 🔧 Configuration File Locations
+
+**APK Internal:**
+- `assets/` - Could store default config.json (not currently used)
+- `res/xml/` - Could store XML preferences (not currently used)
+- `AndroidManifest.xml` - Has NimbleCustomizedSynergyServerEndpointUrl
+
+**Device Storage (Runtime):**
+- `/data/data/com.ea.games.r3_row/shared_prefs/rr3_community_server.xml` ✅ In use
+- `/data/data/com.ea.games.r3_row/shared_prefs/rr3_offline_settings.xml` ✅ In use
+- `/data/data/com.ea.games.r3_row/shared_prefs/rr3_community_config.xml` ⭐ Proposed
+
+**External Storage (Optional):**
+- `/sdcard/Android/data/com.ea.games.r3_row/files/config.json` - Backup/import
+- `/sdcard/RealRacing3/community_settings.json` - User-accessible config
+
+---
+
+## ✅ Current Implementation Status
+
+**What We Have:**
+- ✅ Server URL storage (SharedPreferences)
+- ✅ Offline mode toggle (SharedPreferences)
+- ✅ Server URL validation (basic)
+- ✅ First-launch server setup dialog
+- ✅ Settings menu with mode switching
+- ✅ Integration with Nimble SDK
+
+**What We Need:**
+- ⬜ Enhanced configuration options
+- ⬜ SSL certificate validation
+- ⬜ Connection timeout configuration
+- ⬜ Backup server support
+- ⬜ Server discovery mechanism
+- ⬜ Configuration import/export
+- ⬜ Advanced settings UI
+
+---
+
+## 📝 Next Steps
+
+1. **Phase 1:** Keep current system, fix SSL validation ⚠️
+2. **Phase 2:** Add enhanced config options (timeout, backup server)
+3. **Phase 3:** Build advanced settings UI
+4. **Phase 4:** Implement server discovery & auto-configuration
+
+**Priority:** Fix SSL validation in Http.java immediately for security!
+
+---
+
+**Analysis Complete** ✅  
+**Configuration System:** Currently functional, recommended enhancements documented  
+**Security Status:** ⚠️ SSL validation needs fixing  
+**Network Stack:** Fully mapped and understood