HOSTING: the analytics dashboard is public at /stats (and the base-path trap)

GoatCounter now serves at https://stellate.app/stats/ behind its own login, via -base-path /stats so no HTML rewriting, subdomain or second cert is needed. Recorded here because it is all server-side config a rebuilt droplet would otherwise lose.

• The trap, written down because it cost two minutes of dead analytics today: -base-path moves the COLLECTION endpoint as well, so the beacon proxy must target /stats/count.

• Also corrects the password-reset invocation (db update user, not db update-user) and notes the localhost-only tunnel shim as the fallback.

▶ Play it: Food Court Eternity → Smoke Arithmetic → Barometric Stampede — a constellation across three families — the path is the mix https://stellate.app/?genre=vaporwave&seed=2111&path=1679.4415,292.16891,1718.20526&xdur=0.046

9d20ac0 https://github.com/aboard-io/stellate/commit/9d20ac0f4ce9b3606c7fd5358c755641d16ca68d