feat: add AliasVault container and installation scripts; update Colanode setup instructions

json/aliasvault.json

@@ -0,0 +1,48 @@
+{
+    "name": "AliasVault",
+    "slug": "aliasvault",
+    "categories": [
+        6
+    ],
+    "date_created": "2026-05-16",
+    "type": "ct",
+    "updateable": true,
+    "privileged": true,
+    "interface_port": 443,
+    "documentation": "https://docs.aliasvault.net/",
+    "website": "https://aliasvault.net/",
+    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/aliasvault.webp",
+    "description": "AliasVault is an open-source, end-to-end encrypted password manager and email alias service. It features a zero-knowledge architecture where your master password never leaves your device, a built-in SMTP server for alias email addresses, browser extensions with autofill, and native iOS/Android apps.",
+    "install_methods": [
+        {
+            "type": "default",
+            "script": "ct/aliasvault.sh",
+            "config_path": "/opt/aliasvault/.env",
+            "resources": {
+                "cpu": 2,
+                "ram": 2048,
+                "hdd": 16,
+                "os": "Debian",
+                "version": "12"
+            }
+        }
+    ],
+    "default_credentials": {
+        "username": "admin",
+        "password": null
+    },
+    "notes": [
+        {
+            "text": "A privileged LXC container is required because AliasVault runs via Docker Compose internally.",
+            "type": "info"
+        },
+        {
+            "text": "The admin password is auto-generated during installation and displayed in the installation output. Save it immediately.",
+            "type": "warning"
+        },
+        {
+            "text": "To receive alias emails, configure your domain's MX record to point to this server and update PRIVATE_EMAIL_DOMAINS in /opt/aliasvault/.env.",
+            "type": "info"
+        }
+    ]
+}

json/colanode.json

@@ -33,7 +33,11 @@
     },
     "notes": [
         {
-            "text": "Web UI is available at https://YOUR_IP:4000 (self-signed certificate — accept the browser warning in the browser). When adding a server inside the app, enter https://YOUR_IP:4000/config as the server URL.",
+            "text": "Before using the app: download and import the self-signed certificate into your browser. Navigate to https://YOUR_IP:4000/colanode.crt and install it as a trusted CA. This is required for Service Worker and OPFS storage to work.",
+            "type": "warning"
+        },
+        {
+            "text": "Web UI: https://YOUR_IP:4000 — Server URL when adding a server inside the app: https://YOUR_IP:4000/config",
             "type": "info"
         },
         {