feat: production-ready domain control dashboard

.env.example

@@ -0,0 +1,10 @@
+# For LAN use, set this to the host's specific private address, for example 192.168.178.10.
+# Keep 127.0.0.1 when a reverse proxy terminates HTTPS locally.
+BIND_ADDRESS=127.0.0.1
+WEB_PORT=8080
+
+# lan is only appropriate for an isolated, trusted LAN. Set https behind a TLS reverse proxy.
+APP_MODE=lan
+
+# Create this file once with: openssl rand -base64 32 > secrets/dyndns_master_key
+MASTER_KEY_FILE=./secrets/dyndns_master_key