Publish curated DockDeck source from e849f3f050ceee8d20b68845b75d635413a1f395

README.md

@@ -30,7 +30,7 @@ Requirements: Docker with Compose v2, or Node.js 22 with npm **11.16.0** for dev
 
    On Windows PowerShell, use `Copy-Item .env.example .env` for the last command.
 
-2. Generate an operator password hash:
+2. Generate an operator password hash (this host-side helper requires Node.js 22 or newer, including when the application itself runs in Docker):
 
    ```sh
    node scripts/hash-operator-password.mjs
@@ -48,6 +48,12 @@ Requirements: Docker with Compose v2, or Node.js 22 with npm **11.16.0** for dev
 
 The default port publication is loopback-only. To make DockDeck reachable on a trusted LAN, set `DOCKDECK_BIND_ADDRESS` to the intended host address and keep operator authentication enabled. Use an authenticated HTTPS reverse proxy for access beyond that LAN; HTTP Basic credentials must not cross an untrusted plaintext connection.
 
+## Build your first dashboard
+
+Start with a few application links and favourites, then arrange their groups before adding integrations. Connect one read-only provider at a time and check its reported availability. A working shortcut only proves that a link exists; it does not establish application health.
+
+Keep connector credentials on the server. If an integration fails, check its endpoint, permissions and trusted TLS configuration before granting broader access. Back up the SQLite state and the integration-secret file together when you use persisted connectors.
+
 ## Discovery profiles
 
 The recommended profile points `APPOPS_URL` at a read-only AppOps inventory endpoint. No Docker socket is mounted.