docs: update deployment instructions for Auth Portal with Traefik in a single Docker Compose stack

deploy/env.traefik.example

@@ -0,0 +1,24 @@
+# Production .env for deploy/docker-compose.traefik.yml (auth + Traefik).
+# Copy to /opt/auth-portal/.env and fill secrets. Do not commit.
+
+# --- Traefik / Let's Encrypt (Cloudflare DNS-01) ---
+CF_DNS_API_TOKEN=
+[email protected]
+AUTH_DOMAIN=auth.shnt.top
+# TRAEFIK_IMAGE_TAG=v3.7
+# TRAEFIK_HTTP_PORT=80
+# TRAEFIK_HTTPS_PORT=443
+# TRAEFIK_LOG_LEVEL=INFO
+
+# --- Auth Portal ---
+AUTH_IMAGE_TAG=latest
+JWT_SECRET=
+JWT_TTL_HOURS=1
+REFRESH_TTL_DAYS=14
+ISSUER=https://auth.shnt.top
+[email protected]
+ADMIN_PASSWORD=
+ADMIN_NAME=Admin
+RETURN_TO_ALLOWLIST=.shnt.top,https://vps.shnt.top,https://cfdm.shnt.top
+LOG_LEVEL=info
+NODE_ENV=production