Refactor Indeehub integration and enhance deployment documentation

- Updated Indeehub references throughout the codebase, changing the name from "IndeedHub" to "Indeehub" for consistency.
- Implemented a virtual app structure for Indeehub, allowing it to open an external URL without requiring a container.
- Enhanced deployment scripts and documentation to clarify SSH access and password management for Indeehub.
- Improved error handling and retry logic in various components to ensure better user experience during onboarding and app interactions.
- Updated CSS for visual enhancements and added new buttons for improved navigation in the AppLauncherOverlay.

neode-ui/src/stores/appLauncher.ts

@@ -16,14 +16,45 @@ function mustOpenInNewTab(url: string): boolean {
   }
 }
 
-/** Rewrite to same-origin proxy so iframe can embed (nginx strips X-Frame-Options) */
+/** Port → proxy path for apps (nginx strips X-Frame-Options) */
+const PORT_TO_PROXY: Record<string, string> = {
+  '81': '/app/nginx-proxy-manager/',
+  '3000': '/app/grafana/',
+  '3001': '/app/uptime-kuma/',
+  '8080': '/app/endurain/',
+  '8081': '/app/lnd/',
+  '8082': '/app/vaultwarden/',
+  '8083': '/app/filebrowser/',
+  '8085': '/app/nextcloud/',
+  '8096': '/app/jellyfin/',
+  '8123': '/app/homeassistant/',
+  '8240': '/app/tailscale/',
+  '8334': '/app/bitcoin-ui/',
+  '8888': '/app/searxng/',
+  '9000': '/app/portainer/',
+  '9001': '/app/penpot/',
+  '9980': '/app/onlyoffice/',
+  '11434': '/app/ollama/',
+  '2283': '/app/immich/',
+  '23000': '/app/btcpay/',
+  '2342': '/app/photoprism/',
+  '4080': '/app/mempool/',
+  '50002': '/app/electrs/',
+  '8175': '/app/fedimint/',
+}
+
+/** Rewrite to same-origin proxy so iframe can embed (avoids mixed content on HTTPS) */
 function toEmbeddableUrl(url: string): string {
   try {
     const u = new URL(url)
     const origin = window.location.origin
-    // Only Vaultwarden and Penpot support subpath proxy; Nextcloud/Immich open in new tab
-    if (u.port === '8082') return `${origin}/app/vaultwarden/`
-    if (u.port === '9001') return `${origin}/app/penpot/`
+    const proxyPath = PORT_TO_PROXY[u.port]
+    const sameHost = u.hostname === window.location.hostname
+    const needsProxy = window.location.protocol === 'https:' && u.protocol === 'http:'
+    // Use proxy when: (a) mixed content, or (b) vaultwarden/penpot always (subpath required)
+    if (proxyPath && sameHost && (needsProxy || u.port === '8082' || u.port === '9001')) {
+      return `${origin}${proxyPath}`
+    }
   } catch {
     /* ignore */
   }
@@ -37,12 +68,13 @@ export const useAppLauncherStore = defineStore('appLauncher', () => {
   let previousActiveElement: HTMLElement | null = null
 
   function open(payload: { url: string; title: string; openInNewTab?: boolean }) {
+    const embeddableUrl = toEmbeddableUrl(payload.url)
     if (payload.openInNewTab || mustOpenInNewTab(payload.url)) {
-      window.open(payload.url, '_blank', 'noopener,noreferrer')
+      window.open(embeddableUrl, '_blank', 'noopener,noreferrer')
       return
     }
     previousActiveElement = (document.activeElement as HTMLElement) || null
-    url.value = toEmbeddableUrl(payload.url)
+    url.value = embeddableUrl
     title.value = payload.title
     isOpen.value = true
   }