update installation

.env.example

@@ -1,6 +1,7 @@
 BROKER_DOMAIN=broker.example.com
 GITEA_DOMAIN=git.example.com
-LETSENCRYPT_EMAIL=admin@example.com
+GITEA_PUBLIC_URL=http://git.example.com:8680/
+LETSENCRYPT_EMAIL=
 HTTP_PORT=8680
 HTTPS_PORT=8643
 
@@ -9,25 +10,28 @@ BROKER_DIRECT_PORT=8080
 GITEA_DIRECT_PORT=3000
 GITEA_DIRECT_ROOT_URL=http://localhost:3000/
 
+# none: HTTP-only testing before DNS and port forwarding are ready.
 # letsencrypt: manage a certificate automatically with Certbot.
 # custom: read the named certificate files from ./config/ssl.
-SSL_MODE=letsencrypt
+SSL_MODE=none
 SSL_CERTIFICATE_DIR=./config/letsencrypt/live/broker.example.com
 SSL_CERTIFICATE_FILE=fullchain.pem
 SSL_CERTIFICATE_KEY_FILE=privkey.pem
 
 TAPM_DATABASE_DSN=file:/data/tapm.db?_pragma=busy_timeout(5000)&_pragma=foreign_keys(1)&_pragma=journal_mode(WAL)
-TAPM_PUBLIC_URL=https://broker.example.com
-TAPM_GITEA_URL=https://git.example.com
-TAPM_GITEA_CLIENT_ID=replace-after-creating-the-gitea-oauth-app
-TAPM_GITEA_CLIENT_SECRET=replace-after-creating-the-gitea-oauth-app
+TAPM_PUBLIC_URL=http://broker.example.com:8680
+TAPM_GITEA_URL=http://git.example.com:8680
+# These values are intentionally blank during initial Gitea bootstrap.
+# Run ./manage.sh configure-broker before starting the broker.
+TAPM_GITEA_CLIENT_ID=
+TAPM_GITEA_CLIENT_SECRET=
 TAPM_GITEA_PACKAGE_OWNER=TAI
-TAPM_GITEA_PACKAGE_USERNAME=tapm-packages
-TAPM_GITEA_PACKAGE_TOKEN=replace-with-read-package-token
-TAPM_GITEA_PACKAGE_WRITE_USERNAME=tapm-publisher
-TAPM_GITEA_PACKAGE_WRITE_TOKEN=replace-with-write-package-token
+TAPM_GITEA_PACKAGE_USERNAME=
+TAPM_GITEA_PACKAGE_TOKEN=
+TAPM_GITEA_PACKAGE_WRITE_USERNAME=
+TAPM_GITEA_PACKAGE_WRITE_TOKEN=
 TAPM_ALLOWED_GITEA_USERS=taiadmin
-TAPM_COOKIE_SECRET=replace-with-output-of-openssl-rand-base64-48
+TAPM_COOKIE_SECRET=
 TAPM_DEFAULT_DURATION=3h
 TAPM_DEFAULT_HOST_LIMIT=3
 TAPM_MAX_HOST_LIMIT=25