cfddns: rebuild on private fork with management web UI

- Swap image from favonia/cloudflare-ddns:latest to
  git.alexzaw.dev/alexz/cloudflare-ddns:latest (private fork with
  cmd/manager binary that wraps the original ddns updater)
- Expose web UI on internal port 8080, traefik-routable
- Add CFDDNS_WEB_USER/CFDDNS_WEB_PASSWORD basic-auth form fields
- Repurpose existing DOMAINS/PROXIED/UPDATE_CRON/TZ as first-run seed
  for the YAML config that the UI manages thereafter
- Mount ${APP_DATA_DIR}/data:/config for persistent cfddns.yaml
- Healthcheck on /healthz via 127.0.0.1 (alpine wget)
- Bump tipi_version 7 -> 8 to trigger app update

apps/cfddns/config.json

@@ -3,63 +3,84 @@
   "name": "Cloudflare DDNS",
   "id": "cfddns",
   "available": true,
-  "exposable": false,
+  "port": 8533,
+  "exposable": true,
   "dynamic_config": true,
-  "no_gui": true,
-  "tipi_version": 7,
-  "version": "latest",
+  "no_gui": false,
+  "tipi_version": 8,
+  "version": "v1-ui1",
   "categories": [
     "network",
     "utilities"
   ],
-  "description": "Automatically update Cloudflare DNS records with your current public IP. Supports multiple domains, IPv4/IPv6, and proxy toggle.",
-  "short_desc": "Dynamic DNS updater for Cloudflare",
-  "author": "favonia",
-  "source": "https://github.com/favonia/cloudflare-ddns",
+  "description": "Automatically updates Cloudflare DNS records with your current public IP. Manage domains, proxied state, schedule, API token, and view live status & logs from a built-in web UI. Fork of favonia/cloudflare-ddns with an added management binary.",
+  "short_desc": "Dynamic DNS for Cloudflare, with web UI",
+  "author": "alexz (fork of favonia/cloudflare-ddns)",
+  "source": "https://git.alexzaw.dev/alexz/cloudflare-ddns",
+  "website": "https://github.com/favonia/cloudflare-ddns",
   "form_fields": [
+    {
+      "type": "text",
+      "label": "Web UI Username",
+      "env_variable": "CFDDNS_WEB_USER",
+      "required": true,
+      "default": "admin",
+      "min": 3,
+      "max": 50,
+      "hint": "Username for HTTP basic auth on the management UI"
+    },
+    {
+      "type": "password",
+      "label": "Web UI Password",
+      "env_variable": "CFDDNS_WEB_PASSWORD",
+      "required": true,
+      "min": 8,
+      "hint": "Password for HTTP basic auth on the management UI"
+    },
     {
       "type": "password",
       "label": "Cloudflare API Token",
       "env_variable": "CLOUDFLARE_API_TOKEN",
       "required": true,
-      "hint": "API token with DNS edit permissions"
+      "hint": "API token with Zone:DNS:Edit permissions. After first start the UI manages this."
     },
     {
       "type": "text",
-      "label": "Domains (comma-separated)",
+      "label": "Initial Domains (comma-separated)",
       "env_variable": "DOMAINS",
-      "required": true,
-      "hint": "e.g. home.example.com,vpn.example.com"
+      "required": false,
+      "hint": "First-run seed only — managed by the web UI afterward. e.g. home.example.com,vpn.example.com"
     },
     {
       "type": "boolean",
-      "label": "Proxied (Orange Cloud)",
+      "label": "Initial Proxied (Orange Cloud)",
       "env_variable": "PROXIED",
       "required": false,
-      "default": false
+      "default": false,
+      "hint": "First-run seed only — proxy state is managed per-domain by the UI afterward"
     },
     {
       "type": "text",
-      "label": "Update Schedule",
+      "label": "Initial Update Schedule",
       "env_variable": "UPDATE_CRON",
       "required": false,
       "default": "@every 5m",
-      "hint": "Cron expression or @every Xm"
+      "hint": "First-run seed only — managed by the UI afterward. Cron expression or @every Xm."
     },
     {
       "type": "text",
-      "label": "Timezone",
+      "label": "Initial Timezone",
       "env_variable": "TZ",
       "required": false,
-      "default": "UTC"
+      "default": "UTC",
+      "hint": "First-run seed only — managed by the UI afterward"
     }
   ],
   "supported_architectures": [
-    "arm64",
     "amd64"
   ],
   "created_at": 1736974800000,
-  "updated_at": 1736974800000,
+  "updated_at": 1747555200000,
   "deprecated": false,
   "min_tipi_version": "4.5.0"
 }