# DoneTick

Live deployment
- Host: PlausibleDeniability
- Public URL: https://donetick.paccoco.com
- Internal URL: http://10.5.30.6:2021
- Live config path: `/mnt/tank/docker/appdata/donetick/config/selfhosted.yaml`

Auth
- Authentik OIDC app slug: `donetick`
- Web redirect URI: `https://donetick.paccoco.com/auth/oauth2`
- Native redirect URI: `donetick://auth/oauth2`
- DoneTick API resource endpoint exposing IdP metadata: `/api/v1/resource`
- Optional role mapping groups:
  - `donetick-admins`
  - `donetick-managers`

Pangolin
- Resource: `donetick.paccoco.com`
- Current target site: Plausible Deniability (site 4)
- Target health check must follow the current host/port after renumbering; stale `hcHostname` values can leave the route unhealthy even when the target IP/port are correct.

Rollback
- Restore the previous live config from `/mnt/tank/docker/appdata/donetick/config/selfhosted.yaml.bak-*` and restart the `donetick` container.
- For Pangolin, restore target 91 from `/home/fizzlepoof/pangolin-donetick-target-91-before.json` or from a fresh Pangolin API backup if the public route regresses.