Internal / operator docs

Not for clients

This section is for the Kordox platform operator (you and your team). It covers one-time platform setup, secrets, and deployment — things clients never do. Don't link it from client-facing material.

For real privacy, gate /internal/* behind Cloudflare Access (allow only your team's emails). Until then these pages are noindex but technically reachable by URL.

What's here

• Email OAuth setup — register the Gmail & Outlook OAuth apps once, set the platform secrets. (Clients only click "Connect".)
• Deploy & secrets — how staging/production deploy and which secrets each environment needs.

The platform vs. the client

	Who	What they do
Platform setup	You (operator), once	Register OAuth apps, set *_CLIENT_ID/SECRET secrets, deploy
Connecting email	Each client	Click "Connect Gmail/Outlook", approve their own mailbox

So OAuth-app registration is never per-client — it's done once, by you.