Pass VITE_APP_API_BASE_URL, UPTIME_APP_API_BASE_URL and VITE_APP_LOG_LEVEL into the Checkmate client build so the frontend targets /api/v1 and uses a warn log level (applied in both update and install scripts). Rename PORT to SERVER_HOST/SERVER_PORT in the installer and set SERVER_HOST=0.0.0.0 so the server binds correctly. Use quiet systemctl enable (-q --now) for checkmate services and reload nginx instead of re-enabling it. Move vaultwarden-install.sh into install/deferred/.