[Copilot]

Summary

Adds a complete self-hosting option under deploy/ for running the JetKVM cloud API and dashboard on any Docker host.

Changes

• deploy/setup-deployment.sh — interactive builder that generates everything needed to run the stack in the deploy/ folder:
  • compose.yaml — Traefik v3 reverse proxy, Postgres 16, a one-shot Prisma migration job, the cloud API (built from the repo Dockerfile), and the dashboard UI built directly from a sibling kvm repository checkout and served by Caddy
  • Caddyfile — static SPA file server config for the built dashboard
  • .env (chmod 600) — generated secrets, domains, and OIDC settings matching .env.example
  • setup-deployment.env (chmod 600) — persistent answers file; AUTORUN=true enables fully non-interactive reruns, AUTORUN=false pre-fills prompts with prior answers
  • Three-tier value precedence: exported env var → answers file → interactive prompt/default
  • TLS modes: Let's Encrypt HTTP-01, Cloudflare DNS-01, or internal self-signed
  • Guided OIDC setup for Google, authentik, or Keycloak with the exact redirect URI (https://<api-domain>/oidc/callback)
  • Reruns preserve POSTGRES_PASSWORD and COOKIE_SECRET, so an initialised Postgres volume keeps working
• deploy/deployment.md — self-hosting guide covering prerequisites, DNS/TLS, OIDC provider registration, running the setup script, custom JetKVM device build pointing at the self-hosted cloud URL, and troubleshooting

Validation

• bash -n syntax check passes
• Full non-interactive (AUTORUN=true) run produces a compose.yaml that passes docker compose config
• Rerun preserves existing secrets in .env
• Generated .env keys, /oidc/callback route, and /healthz endpoint verified against src/
• Secret scanning and CodeQL clean