- serve.json: now uses ${TS_CERT_DOMAIN} with 443 (Tailscale default)
- serve.headscale.json: uses hardcoded example domain (Headscale)
- README: replace all {{service}} placeholders with vikunja
- Update logo to selfh.st icon
- Harden .gitignore
- Use controlplane.tailscale.com as default TS_LOGIN_SERVER
- Use consistent .your-tailnet.ts.net and .yourdomain.com placeholders
- Add clear section comments
- docker-compose.yml: read authkey and login server from env
- README.md: updated instructions to use env vars instead of editing the file
- Added .gitignore for secrets and Tailscale state