Reset Gokapi and log in with Pocket ID

Gokapi now keeps its config and data in /opt/stacks/gokapi instead of named
volumes. config.json is templated with Pocket ID as the OIDC provider, so a
fresh install never shows the open /setup wizard. On a new database a one-off
run with --deployment-password creates the super admin, after which only
existing users can log in.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

roles/docker/templates/gokapi-config.json.j2

@@ -0,0 +1,38 @@
+{
+  "Authentication": {
+    "Method": 1,
+    "SaltAdmin": "{{ vault_gokapi.salt_admin }}",
+    "SaltFiles": "{{ vault_gokapi.salt_files }}",
+    "Username": "{{ gokapi_admin_email }}",
+    "HeaderKey": "",
+    "OauthProvider": "https://{{ subdomains.pocketid }}",
+    "OAuthClientId": "{{ vault_gokapi.pocketid.client_id }}",
+    "OAuthClientSecret": "{{ vault_gokapi.pocketid.client_secret }}",
+    "OauthGroupScope": "",
+    "OAuthRecheckInterval": 12,
+    "OAuthGroups": [],
+    "OnlyRegisteredUsers": true
+  },
+  "Port": ":53842",
+  "ServerUrl": "https://{{ subdomains.gokapi }}/",
+  "RedirectUrl": "https://github.com/Forceu/Gokapi/",
+  "PublicName": "Satellite Sharing",
+  "DataDir": "data",
+  "DatabaseUrl": "sqlite://./data/gokapi.sqlite",
+  "ConfigVersion": 22,
+  "MaxFileSizeMB": 102400,
+  "MaxMemory": 50,
+  "ChunkSize": 45,
+  "MaxParallelUploads": 3,
+  "Encryption": {
+    "Level": 0,
+    "Cipher": null,
+    "Salt": "",
+    "Checksum": "",
+    "ChecksumSalt": ""
+  },
+  "UseSsl": false,
+  "PicturesAlwaysLocal": false,
+  "SaveIp": false,
+  "IncludeFilename": false
+}