Tomter Vel's own platform: Caddy, NATS, Kanidm and portal as containers

One host, four containers, content fetched from tomtervel/questions.
bootstrap.sh renders configs from .env and recovers the Kanidm admin;
kanidm-setup.sh creates the portal client and the desk groups. An
optional runner profile lets the content repo's reload reach this host.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

nats/nats.conf.tpl

@@ -0,0 +1,19 @@
+# NATS with JetStream: portal's records, events and projections live
+# here. bootstrap.sh renders this into nats.conf from .env.
+port: 4222
+http_port: 8222
+
+max_payload: 8388608
+max_connections: 1000
+
+# User and password rather than a token: URL credentials
+# (nats://user:pass@host) behave the same in every client library.
+authorization {
+  users = [
+    { user: "portal", password: "${NATS_PASSWORD}" }
+  ]
+}
+
+jetstream {
+  store_dir: /data
+}