docs: deployment templates for Cloudflare Tunnel, Caddy, Fly.io, Render

examples/compose/cloudflared-paired.yml pairs RefBoard with a cloudflared
sidecar reading a TUNNEL_TOKEN env var — no inbound ports needed, suitable
for home / studio servers.

examples/compose/behind-caddy.yml + Caddyfile fronts RefBoard with Caddy
for automatic Let's Encrypt TLS on a public hostname. Caddy 2's
reverse_proxy transparently upgrades Socket.IO WebSockets.

examples/fly.toml deploys to Fly.io using the GHCR image and a persistent
volume mounted at /app/data. STORAGE_BACKEND=fs so the whole stack is one
machine with one disk.

examples/render.yaml is a Render.com Blueprint targeting the same shape
(GHCR image + attached disk + FS storage).

examples/README.md indexes everything and adds notes for Coolify /
Dokploy / CapRover / Railway, which consume the existing compose file
directly without a dedicated template.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

examples/fly.toml

@@ -0,0 +1,53 @@
+# Fly.io deployment manifest for RefBoard.
+#
+# Quick start:
+#   fly auth signup                                  # if you don't have an account
+#   fly launch --copy-config --no-deploy             # creates the app
+#   fly secrets set JWT_SECRET=$(openssl rand -base64 64)
+#   fly volumes create refboard_data --size 10 --region <your-region>
+#   fly deploy
+#
+# Notes:
+# - This uses the pre-built GHCR image and the FS storage adapter so no MinIO
+#   is needed. All state (SQLite + media bytes + JWT secret) lives on the
+#   attached volume.
+# - The first user you sign up in the browser becomes admin. After that, turn
+#   self-registration off in /admin and set ALLOW_SELF_REGISTRATION=false as
+#   a fly secret to lock it in across rebuilds.
+
+app = "refboard"           # change to your unique Fly app name
+primary_region = "iad"     # change to your closest region (fly platform regions)
+
+[build]
+  image = "ghcr.io/metalfinger/refboard:latest"
+
+[env]
+  NODE_ENV = "production"
+  PORT = "8000"
+  STORAGE_BACKEND = "fs"
+  STORAGE_DATA_DIR = "/app/data/storage"
+  DB_PATH = "/app/data/refboard.db"
+  MAX_FILE_SIZE_MB = "200"
+  ALLOW_SELF_REGISTRATION = "false"
+  # Set CORS_ORIGIN via `fly secrets set CORS_ORIGIN=https://<app>.fly.dev`
+
+[http_service]
+  internal_port = 8000
+  force_https = true
+  auto_stop_machines = false
+  auto_start_machines = true
+  min_machines_running = 1
+
+  [http_service.concurrency]
+    type = "requests"
+    soft_limit = 100
+    hard_limit = 200
+
+[[mounts]]
+  source = "refboard_data"
+  destination = "/app/data"
+
+[[vm]]
+  cpu_kind = "shared"
+  cpus = 1
+  memory_mb = 1024