- Move Vikunja DB user/password/database and JWT secret to environment variables
- Update .env.example with clear sections and 'change-me' placeholders
- Update SECURITY.md to reflect that more secrets now live in .env
- Tailscale as default (Quick Start at top)
- Headscale section at bottom with explicit steps
- Clear .env changes for each environment
- Updated serve config switching table
- serve.json: now uses ${TS_CERT_DOMAIN} with 443 (Tailscale default)
- serve.headscale.json: uses hardcoded example domain (Headscale)
- README: replace all {{service}} placeholders with vikunja
- Update logo to selfh.st icon
- Harden .gitignore
- Use controlplane.tailscale.com as default TS_LOGIN_SERVER
- Use consistent .your-tailnet.ts.net and .yourdomain.com placeholders
- Add clear section comments
- docker-compose.yml: read authkey and login server from env
- README.md: updated instructions to use env vars instead of editing the file
- Added .gitignore for secrets and Tailscale state