feat: Complete core platform with unified config, CLI, and multi-platform deployment (#14)

Author: chutch3

.env.example

@@ -0,0 +1,101 @@
+# Selfhosted Configuration
+# Copy this file to .env and configure with your values
+
+# =============================================================================
+# REQUIRED: Base Domain Configuration
+# =============================================================================
+
+# Your main domain name - all services will use subdomains of this
+# Example: if BASE_DOMAIN=example.com, services will be at service.example.com
+BASE_DOMAIN=your-domain.com
+
+# Wildcard domain for SSL certificate generation
+# This should match your BASE_DOMAIN with a wildcard prefix
+WILDCARD_DOMAIN=*.your-domain.com
+
+# =============================================================================
+# REQUIRED: Cloudflare DNS Configuration
+# =============================================================================
+# Required for automatic SSL certificate generation via DNS challenge
+# Get these from your Cloudflare account: https://dash.cloudflare.com/profile/api-tokens
+
+# Option 1: API Token (Recommended - more secure)
+CF_Token=your_cloudflare_api_token_here
+
+# Option 2: Email + API Key (Legacy)
+# CF_Email=your-email@example.com
+# CF_Key=your_global_api_key_here
+
+# =============================================================================
+# OPTIONAL: Docker User Configuration
+# =============================================================================
+# Set these to match your user to avoid permission issues with mounted volumes
+# Run: id $(whoami) to get your values
+
+# Your user ID
+UID=1000
+
+# Your group ID
+GID=1000
+
+# =============================================================================
+# OPTIONAL: SSH Configuration
+# =============================================================================
+# Used for Docker Swarm multi-node deployments
+
+# SSH key file for remote access (default: ~/.ssh/selfhosted_rsa)
+# SSH_KEY_FILE=/home/user/.ssh/selfhosted_rsa
+
+# SSH connection timeout in seconds
+# SSH_TIMEOUT=5
+
+# =============================================================================
+# OPTIONAL: Service-Specific Domain Overrides
+# =============================================================================
+# By default, services use: service-name.BASE_DOMAIN
+# Uncomment and modify these to customize individual service domains
+
+# Core Services
+# DOMAIN_HOMEPAGE=dashboard.your-domain.com
+
+# Finance
+# DOMAIN_BUDGET=budget.your-domain.com  # Actual Budget
+
+# Media Services
+# DOMAIN_PHOTOPRISM=photos.your-domain.com
+# DOMAIN_EMBY=media.your-domain.com
+# DOMAIN_RADARR=movies.your-domain.com
+# DOMAIN_SONARR=tv.your-domain.com
+# DOMAIN_DELUGE=torrents.your-domain.com
+# DOMAIN_QBITTORRENT=qbt.your-domain.com
+# DOMAIN_PROWLARR=indexers.your-domain.com
+
+# Collaboration & Productivity
+# DOMAIN_CRYPTPAD=docs.your-domain.com
+# DOMAIN_CRYPTPAD_SANDBOX=sandbox-docs.your-domain.com
+# DOMAIN_LIBRECHAT=chat.your-domain.com
+
+# Smart Home & Management
+# DOMAIN_HOMEASSISTANT=home.your-domain.com
+# DOMAIN_PORTAINER_AGENT=containers.your-domain.com
+
+# =============================================================================
+# OPTIONAL: Volume Configuration
+# =============================================================================
+# Configure data storage paths for services
+# Default paths assume you have external storage mounted at /media/external
+
+# Media storage path (for Emby, PhotoPrism, etc.)
+# MEDIA_ROOT=/media/external
+
+# Downloads path (for torrents, etc.)
+# DOWNLOADS_ROOT=/media/external/downloads
+
+# =============================================================================
+# SECURITY NOTES
+# =============================================================================
+# 1. Never commit the actual .env file to version control
+# 2. Use strong, unique passwords for all services
+# 3. Regularly rotate API tokens and certificates
+# 4. Consider using Docker secrets for production deployments
+# 5. Ensure your domain's DNS points to your server

.gitignore

@@ -167,3 +167,8 @@ cython_debug/
 **/enabled/*.template
 .enabled-services
 certs/
+
+# Environment-specific configuration files
+plan.md
+machines.yml
+.swarm_token