- HTTP: 9000 -> 9100 - HTTPS: 9443 -> 9444 (Portainer already uses 9443)
- Create .env dynamically from Gitea secrets and variables - Add SECRETS.md with configuration instructions - Use secrets for sensitive data (PG_PASS, AUTHENTIK_SECRET_KEY) - Use variables for non-sensitive config