Add paperless-ngx (v2.20.13) as a new ArgoCD-managed service on indri with Authentik OIDC SSO, PostgreSQL on blumeops-pg, Redis sidecar, and NFS document storage on sifaka. Includes Dockerfile built from forge mirror, full k8s manifests, Caddy route, 1Password secrets, and reference documentation. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1.3 KiB
1.3 KiB
| title | modified | tags | |
|---|---|---|---|
| Paperless-ngx | 2026-04-08 |
|
Paperless-ngx
Self-hosted document management system with OCR, tagging, and full-text search.
Quick Reference
| Property | Value |
|---|---|
| URL | https://paperless.ops.eblu.me |
| Tailscale URL | https://paperless.tail8d86e.ts.net |
| Namespace | paperless |
| Image | registry.ops.eblu.me/blumeops/paperless |
| Manifests | argocd/manifests/paperless/ |
| Container source | containers/paperless/Dockerfile |
| Upstream | paperless-ngx/paperless-ngx |
| Database | paperless on [[postgresql |
| Storage | NFS on sifaka at /volume1/paperless |
| Auth | authentik OIDC + local admin |
Architecture
- Web server: Granian (ASGI), port 8000
- Task queue: Celery worker + beat (Redis sidecar)
- OCR: Tesseract (English)
- Process supervisor: s6-overlay
Secrets
1Password item "Paperless (blumeops)" in vault blumeops:
secret-key: Django SECRET_KEYpostgresql-password: database credentialadmin-password: initial admin account passwordsocialaccount-providers: OIDC provider JSON (includes Authentik client secret)
Related
- adding-a-service — Deployment tutorial
- authentik — SSO provider