Finding Your Connection Details Finding your credentials Go to portal → Connect. This page shows connection details for every deployed service, including endpoints, usernames, and passwords. Passwords are masked by default — click to reveal. Copy buttons next to each field for quick clipboard access. Only deployed (enabled) services appear. Service endpoints Public URLs Services with a web interface are reachable at https://-.compacthive.dev: Service URL pattern Woodpecker CI -ci.compacthive.dev Grafana (part of Monitoring) -grafana.compacthive.dev Forgejo -forgejo.compacthive.dev MinIO Console -minio.compacthive.dev Uptime Kuma -status.compacthive.dev FileBrowser -files.compacthive.dev Custom apps -.compacthive.dev Internal-only services These don't have a public URL — they're only reachable from within your namespace, or via the Headscale VPN add-on (Business tier and up): Service Internal address Port PostgreSQL pg--rw..svc 5432 KeyDB cache cache-..svc 6379 MinIO (S3 API) minio-..svc 9000 Credential lifecycle Credentials are generated once during initial deployment and stored as Kubernetes Secrets. They survive service restarts and redeployments. They are deleted only when the tenant namespace (or the specific service) is removed. There's no self-service rotation UI today — if you need to rotate a service credential, disable and re-enable the service.