ngrok off by default (DEFAULT_CONFIG.tunnel=false); access fronted by a reverse proxy (Synology RP -> :9870). New publicUrl / CMUX_PUBLIC_URL / --public-url sets the banner+QR URL only (not routing). --no-tunnel replaced by --tunnel to re-enable ngrok. Adds docs/synology-dynamic-subdomain.md.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
I Luk Kim