wave-1: neutralize minikube paperless/teslamate/mealie (replicas 0, drop ingress)

These migrated to ringtail. Set replicas: 0 (prevents resurrecting the old
instances and double-writing the now-ringtail-owned databases) and remove the
tailscale Ingress from each (the names tesla/meals/paperless were handed off
to the -ringtail ingresses at cutover; a re-created minikube ingress would
steal them back). Service/PVC/ExternalSecrets retained for rollback. Manifest
deletion + source-DB drop come in a later decommission PR.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

argocd/manifests/mealie/deployment.yaml

@@ -4,7 +4,9 @@ metadata:
   name: mealie
   namespace: mealie
 spec:
-  replicas: 1
+  # Migrated to ringtail (mealie-ringtail). Scaled to 0; SQLite PVC retained
+  # for rollback until the decommission PR. See [[migrate-wave1-ringtail]].
+  replicas: 0
   selector:
     matchLabels:
       app: mealie

argocd/manifests/mealie/ingress-tailscale.yaml

@@ -1,25 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: mealie-tailscale
-  namespace: mealie
-  annotations:
-    tailscale.com/proxy-class: "default"
-    tailscale.com/proxy-group: "ingress"
-    gethomepage.dev/enabled: "true"
-    gethomepage.dev/name: "Mealie"
-    gethomepage.dev/group: "Home"
-    gethomepage.dev/icon: "mealie.png"
-    gethomepage.dev/description: "Recipe manager"
-    gethomepage.dev/href: "https://meals.ops.eblu.me"
-    gethomepage.dev/pod-selector: "app=mealie"
-spec:
-  ingressClassName: tailscale
-  defaultBackend:
-    service:
-      name: mealie
-      port:
-        number: 9000
-  tls:
-    - hosts:
-        - meals

argocd/manifests/mealie/kustomization.yaml

@@ -7,7 +7,7 @@ resources:
   - deployment.yaml
   - service.yaml
   - pvc.yaml
-  - ingress-tailscale.yaml
+  # ingress removed: name 'meals' handed off to mealie-ringtail at cutover
   - external-secret.yaml
 
 images:

argocd/manifests/paperless/deployment.yaml

@@ -4,7 +4,10 @@ metadata:
   name: paperless
   namespace: paperless
 spec:
-  replicas: 1
+  # Migrated to ringtail (paperless-ringtail). Scaled to 0 to prevent
+  # double-writing the now-ringtail-owned database; manifest retained for
+  # rollback until the decommission PR. See [[migrate-wave1-ringtail]].
+  replicas: 0
   selector:
     matchLabels:
       app: paperless

argocd/manifests/paperless/ingress-tailscale.yaml

@@ -1,25 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: paperless-tailscale
-  namespace: paperless
-  annotations:
-    tailscale.com/proxy-class: "default"
-    tailscale.com/proxy-group: "ingress"
-    gethomepage.dev/enabled: "true"
-    gethomepage.dev/name: "Paperless"
-    gethomepage.dev/group: "Home"
-    gethomepage.dev/icon: "paperless-ngx.png"
-    gethomepage.dev/description: "Document management"
-    gethomepage.dev/href: "https://paperless.ops.eblu.me"
-    gethomepage.dev/pod-selector: "app=paperless"
-spec:
-  ingressClassName: tailscale
-  defaultBackend:
-    service:
-      name: paperless
-      port:
-        number: 8000
-  tls:
-    - hosts:
-        - paperless

argocd/manifests/paperless/kustomization.yaml

@@ -8,7 +8,7 @@ resources:
   - service.yaml
   - pv-nfs.yaml
   - pvc.yaml
-  - ingress-tailscale.yaml
+  # ingress removed: name 'paperless' handed off to paperless-ringtail at cutover
   - external-secret.yaml
 
 images:

argocd/manifests/teslamate/deployment.yaml

@@ -4,7 +4,10 @@ metadata:
   name: teslamate
   namespace: teslamate
 spec:
-  replicas: 1
+  # Migrated to ringtail (teslamate-ringtail). Scaled to 0 to prevent
+  # double-writing the now-ringtail-owned database; manifest retained for
+  # rollback until the decommission PR. See [[migrate-wave1-ringtail]].
+  replicas: 0
   selector:
     matchLabels:
       app: teslamate

argocd/manifests/teslamate/ingress-tailscale.yaml

@@ -1,25 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: teslamate-tailscale
-  namespace: teslamate
-  annotations:
-    tailscale.com/proxy-class: "default"
-    tailscale.com/proxy-group: "ingress"
-    gethomepage.dev/enabled: "true"
-    gethomepage.dev/name: "TeslaMate"
-    gethomepage.dev/group: "Services"
-    gethomepage.dev/icon: "teslamate.png"
-    gethomepage.dev/description: "Tesla data logger"
-    gethomepage.dev/href: "https://tesla.ops.eblu.me"
-    gethomepage.dev/pod-selector: "app=teslamate"
-spec:
-  ingressClassName: tailscale
-  defaultBackend:
-    service:
-      name: teslamate
-      port:
-        number: 4000
-  tls:
-    - hosts:
-        - tesla

argocd/manifests/teslamate/kustomization.yaml

@@ -6,7 +6,7 @@ namespace: teslamate
 resources:
   - deployment.yaml
   - service.yaml
-  - ingress-tailscale.yaml
+  # ingress removed: name 'tesla' handed off to teslamate-ringtail at cutover
   - external-secret-db.yaml
   - external-secret-encryption-key.yaml