INIT COMMIT

docs/Home.md

@@ -0,0 +1,27 @@
+# Cloudflare Domain Manager
+
+Wiki home — synced from repository on `main` when this file changes.
+
+## Overview
+
+Manage Cloudflare zones, DNS records, domain groups, and TLS certificate expiry from a single UI.
+
+## Configuration
+
+| Variable | Description |
+|----------|-------------|
+| `CLOUDFLARE_API_TOKEN` | API token with Zone.DNS permissions |
+| `DATABASE_URL` | SQLite path (`sqlite:/data/app.db`) |
+| `JWT_SECRET` | JWT signing secret |
+| `ADMIN_USERNAME` | Admin username |
+| `ADMIN_PASSWORD_HASH` | Argon2 hash (empty = dev `admin`/`admin`) |
+
+## Docker
+
+```bash
+docker pull git.shts.su/denozord/cloudflare-domain-manager:latest
+docker run -d -p 8080:8080 -v cfdm-data:/data \
+  -e CLOUDFLARE_API_TOKEN=... \
+  -e JWT_SECRET=... \
+  git.shts.su/denozord/cloudflare-domain-manager:latest
+```

docs/branch-protection.md

@@ -0,0 +1,16 @@
+# Branch protection (configure in Gitea UI)
+
+Apply these rules to **main** and **develop**:
+
+- [ ] Require pull request before merging
+- [ ] Required approvals: 1
+- [ ] Require status checks: `test`
+- [ ] Require branches to be up to date before merging
+- [ ] Include administrators
+- [ ] Prevent force push
+- [ ] Prevent deletion
+
+Repository secrets required for CI:
+
+- `PACKAGE_TOKEN` — registry push
+- `GITEA_TOKEN` — releases and wiki sync