bootstrap HTTPS

# PawFlow Installer

Complete each step in order. Relay image profiles are prepared by the installer before this bootstrap UI opens. The last step applies the configuration and opens the first conversation.

## Admin User

Admin username
Admin password
Confirm admin password

The admin account is created before normal auth is enabled. Password must be at least 12 characters and include lowercase, uppercase, digit, and symbol characters.

## OAuth Configuration

External providers
Session TTL seconds

Builtin auth is always enabled. Add one or more provider names and fill that provider's credentials. Admin link fields bind the first admin account to matching OAuth callbacks.

## Private Gateway

Finalization replaces the temporary bootstrap gateway with this permanent key.

New Private Gateway key
Gateway skin
Final cert file
Final key file

Leave cert/key empty to generate a private self-signed certificate. If you mounted files with scripts/run-pawflow-docker.sh, use their container paths under /app/certs.

## LLM Services

Paste credentials JSON

### Summarizer service

Summarizer service id
Scope
Linked LLM service

## Relay Server

Install a managed server relay now

Optional. You can skip this step and add relays later from a conversation. When enabled, PawFlow generates the relay token server-side and starts a managed workspace relay.

Relay service id
Scope
Auto-background after seconds

## Voice I/O

Optional. Install local speech services now so chat TTS and microphone transcription are available immediately after setup.

Install Supertonic for TTS
TTS service id
Scope
Voice
Language
Install Voicebox for STT
STT service id
Scope
Client id
Whisper model

## First Conversation

Conversation title
Default relay

## Finalize

Finalization writes services, optionally starts the managed server relay, deploys the main flow, starts the executor, creates the first conversation, disables the bootstrap gateway, and redirects to chat.

    Loading installer state...

Server login