# Script Reference

## Root Scripts

- `start-dev.sh`
  - Interactive setup for local development stack (`docker-compose.yml`).
- `start-devprod.sh`
  - Interactive setup for dev-prod stacks (`docker-compose.devprod*.yml`).
- `recreate-devprod.sh`
  - Rebuild/recreate dev-prod services after code/env changes.
  - Use `--qortal` to include `qortal_node` recreation.
  - Use `--extauth` to force external-auth profile recreation.
  - `--extauth` alone now recreates `external_auth` without recreating `qortal_node` dependencies.
- `docker-qortal-restart.sh`
  - Restarts `qortal_node` only (plus optional `--restart-external-auth`).

## `scripts/` Helpers

- `scripts/nextcloud-occ.sh <env-file> <occ args...>`
  - Wrapper for running Nextcloud `occ` inside Docker app container.
- `scripts/select-qortal-p2p-port.sh <env-file>`
  - Chooses an available Qortal API host port and sets P2P to API+1 and QDN to API+3.
- `scripts/ensure-qortal-settings.sh`
  - Initializes `qortal/data/settings.json` from default template when missing.
- `scripts/ensure-qortal-start-args.sh`
  - Initializes `qortal/data/start-arguments.txt` with default JVM args when missing.
  - Optional argument: `<env-file>` to seed from `QORTAL_JVM_MEMORY_ARGS`.
- `scripts/ensure-broker-internal-token.sh <env-file>`
  - Ensures `BROKER_INTERNAL_API_TOKEN` exists (auto-generates when missing).
  - Sets `BROKER_CORS_ALLOWED_ORIGINS` from `NEXTCLOUD_PUBLIC_URL` when empty.
- `scripts/nextcloud-vm-install.sh`
  - VM/non-container oriented installation helper.
- `scripts/install-production-docker.sh`
  - Production-oriented Docker installer baseline (new).

## Recommended Baseline Flows

### Dev-prod no-SSL (external reverse proxy)
1. `./start-devprod.sh`
2. `./recreate-devprod.sh`
3. `make logs-devprod-nossl`

### Dev-prod SSL (internal Caddy)
1. `./start-devprod.sh`
2. `./recreate-devprod.sh --ssl`
3. `make logs-devprod`

### Production-oriented Docker bootstrap (new)
1. `./scripts/install-production-docker.sh --mode nossl --with-external-auth`
2. Validate service health and OIDC setup.
3. Move secrets from templates into managed secret store as needed.