chore: create script for selfhosted reflector (#866)

* self hosted with self gpu

* add optional ollama model

* garage ports

* exposes ports and changes curl

* custom domain

* try to fix wroker

* build locallly

* documentation

* docs format

* precommit

www/.env.selfhosted.example

@@ -0,0 +1,49 @@
+# =======================================================
+# Reflector Self-Hosted Production — Frontend Configuration
+# Generated by: ./scripts/setup-selfhosted.sh
+# =======================================================
+
+# Site URL — set to your domain or server IP
+# The setup script auto-detects this on Linux.
+SITE_URL=https://localhost
+NEXTAUTH_URL=https://localhost
+NEXTAUTH_SECRET=changeme-generate-a-secure-random-string
+
+# API URLs
+# Public-facing (what the browser uses):
+API_URL=https://localhost
+WEBSOCKET_URL=auto
+
+# Internal Docker network (server-side rendering):
+SERVER_API_URL=http://server:1250
+KV_URL=redis://redis:6379
+
+# Authentication
+# Set to true when Authentik is configured
+FEATURE_REQUIRE_LOGIN=false
+
+# Nullify auth vars when not using Authentik
+AUTHENTIK_ISSUER=
+AUTHENTIK_REFRESH_TOKEN_URL=
+
+# =======================================================
+# Authentik OAuth/OIDC (Optional)
+# Uncomment and configure when enabling authentication.
+# See docsv2/selfhosted-production.md for setup instructions.
+# =======================================================
+# FEATURE_REQUIRE_LOGIN=true
+# AUTHENTIK_ISSUER=https://authentik.example.com/application/o/reflector
+# AUTHENTIK_REFRESH_TOKEN_URL=https://authentik.example.com/application/o/token/
+# AUTHENTIK_CLIENT_ID=your-client-id
+# AUTHENTIK_CLIENT_SECRET=your-client-secret
+
+# =======================================================
+# Feature Flags
+# =======================================================
+# FEATURE_ROOMS=true
+# FEATURE_BROWSE=true
+
+# =======================================================
+# Sentry (Optional)
+# =======================================================
+# SENTRY_DSN=