init: ts-shiori — official ghcr.io/go-shiori/shiori:v1.7.0

Bookmark manager (Go, single binary). Single container, SQLite in a
named volume. Default admin (shiori/gopher) is auto-created on first run.

Known issue: Shiori v1.7.0's SPA wizard detection panics with HTTP 500
on the first /api/bookmarks request when no session exists. The setup
wizard does NOT appear on first visit — log in with the default
credentials above and change the password immediately.

Port 8080 inside the sidecar namespace. Optional SHIORI_HTTP_SECRET_KEY
env var would persist sessions across restarts (not enabled by default).

.env.example

@@ -8,31 +8,3 @@ TS_AUTHKEY=***
 # Tailscale control server (default)
 # For Headscale: update to your Headscale server URL
 TS_LOGIN_SERVER=https://controlplane.tailscale.com
-
-# ==========================================
-# REFERENCE: Database credentials (only if your service uses an external DB)
-# Remove this section if your service uses SQLite or has no database
-# ==========================================
-
-POSTGRES_USER={{service}}
-POSTGRES_PASSWORD=***
-POSTGRES_DB={{service}}
-
-# ==========================================
-# CUSTOMIZE: App-specific variables (replace with what your service needs)
-# ==========================================
-
-# Public URL users will access the service at
-# Tailscale example: https://{{service}}.your-tailnet.ts.net
-# Headscale example: http://{{service}}.yourdomain.com
-{{SERVICE}}_SERVICE_PUBLICURL=http://{{service}}.example.com
-
-# Frontend URL (usually the same as PUBLICURL)
-{{SERVICE}}_SERVICE_FRONTENDURL=http://{{service}}.example.com
-
-# Service JWT secret (change this!)
-{{SERVICE}}_SERVICE_JWTSECRET=***
-
-# Add more app-specific vars here as needed, for example:
-# {{SERVICE}}_TIMEZONE=UTC
-# {{SERVICE}}_ADMIN_EMAIL=admin@example.com