init: ts-shiori — official ghcr.io/go-shiori/shiori:v1.7.0

Bookmark manager (Go, single binary). Single container, SQLite in a
named volume. Default admin (shiori/gopher) is auto-created on first run.

Known issue: Shiori v1.7.0's SPA wizard detection panics with HTTP 500
on the first /api/bookmarks request when no session exists. The setup
wizard does NOT appear on first visit — log in with the default
credentials above and change the password immediately.

Port 8080 inside the sidecar namespace. Optional SHIORI_HTTP_SECRET_KEY
env var would persist sessions across restarts (not enabled by default).

tailscale/config/serve.headscale.json

@@ -5,12 +5,12 @@
     }
   },
   "Web": {
-    "{{service}}.yourdomain.com:80": {
+    "shiori.damconsulting.net:80": {
       "Handlers": {
         "/": {
-          "Proxy": "http://127.0.0.1:{{port}}"
+          "Proxy": "http://127.0.0.1:8080"
         }
       }
     }
   }
-}
+}

tailscale/config/serve.json

@@ -11,14 +11,14 @@
     "${TS_CERT_DOMAIN}:80": {
       "Handlers": {
         "/": {
-          "Proxy": "http://127.0.0.1:{{port}}"
+          "Proxy": "http://127.0.0.1:8080"
         }
       }
     },
     "${TS_CERT_DOMAIN}:443": {
       "Handlers": {
         "/": {
-          "Proxy": "http://127.0.0.1:{{port}}"
+          "Proxy": "http://127.0.0.1:8080"
         }
       }
     }