TUNNEX / GUIDED SETUP

  ▀█▀ █ █ █▄ █ █▄ █ █▀▀ ▀▄▀
   █  █ █ █ ▀█ █ ▀█ █▀▀ ▄▀▄
   ▀  ▀▀▀ ▀  ▀ ▀  ▀ ▀▀▀ ▀ ▀
  Connect Everything. Trust Nothing.

  ────────────────────────────────────────────

TUNNEX SETUP
╭─ Security boundary
  │ Tunnex is a self-hosted control plane for users and Linux gateways.
  │ Your public URL is used for sign-in, email links, and gateway enrollment.
  │ Keep the host patched and expose only the ports required by your TLS mode.
  │ macOS and Windows run a portable control plane; their gateway stays on Linux.
╰────────────────────────────────────────────────────────────
    · QuickStart is recommended. You will review every change before Tunnex changes this host.

  ●────  [1/5] Checking this host

    ✓ Detected: Linux
    · Use the existing Docker Engine and Compose installation
    · Control plane with the co-located Linux gateway

  ━●───  [2/5] Selecting a verified Tunnex release

    · Installing Tunnex sha-da73afc201f956a9c2c71b88add9e2362f206deb (image tag sha-da73afc201f956a9c2c71b88add9e2362f206deb)
    · Provenance: operator override sha-da73afc201f956a9c2c71b88add9e2362f206deb (manifest ref da73afc201f956a9c2c71b88add9e2362f206deb)

  ━━●──  [3/5] Configuring your control plane

    ! SMTP skipped — invitations, password resets, and verification emails are unavailable.
   Invitations are the only way people join, and they are delivered by email. Password resets
   and address verification need it too. You can still sign in as the administrator, and the
   dashboard shows a copyable invitation link you can send by hand.
   Enable it later: set SMTP_HOST/SMTP_PORT/SMTP_FROM (and SMTP_USERNAME/SMTP_PASSWORD if your
   provider needs auth) in .env, then `docker compose -f tunnex.yml up -d api`.

  ━━━●─  [4/5] Reviewing the installation plan


    ╭─ QuickStart plan
    │  Mode               QuickStart (recommended)
    │  CP database        external PostgreSQL (credentials hidden)
    │  Version            sha-da73afc201f956a9c2c71b88add9e2362f206deb
    │  Public URL         https://cp.43.205.96.138.sslip.io
    │  TLS mode           direct
    │  Administrator      rds-admin@tunnex.local
    │  Email              skipped
    │  Host readiness     Use the existing Docker Engine and Compose installation
    │  Deployment         Control plane with the co-located Linux gateway
    │  Directory          /home/ubuntu/byodb-cli-preview
    │  Compose project    byodb-cli-preview
    │  Changes            Preview only (no host or product changes)
    ╰─────────────────────────────────────────

  ━━━━●  [5/5] Preview complete

    ✓ Onboarding preview complete. Re-run without --dry-run when you are ready.