Visitor sign in kiosk: multi-site, badge printing, WWCC expiry warnings, admin accounts with 2FA

docker-compose.yml

@@ -7,9 +7,13 @@ services:
     env_file:
       - .env
     ports:
-      - "${HOST_PORT:-8088}:3000"
+      # The kiosk and admin console, over https.
+      - "${HOST_PORT:-8443}:3000"
+      # Plain http helper: serves /ca.crt and redirects everything else to https.
+      # Drop this line if you are not using the built-in certificate.
+      - "${HOST_HTTP_PORT:-8080}:3001"
     volumes:
-      # Database, visitor photos and (optionally) TLS certs live here.
+      # Database, visitor photos and the certificates live here.
       - ./data:/data
       # Google service account key, if you mount it as a file rather than base64 in .env.
       - ./secrets:/secrets:ro