eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions
blumeops/docs/reference/services/paperless.md
Erich Blume 07f52e9488
All checks were successful
Build Container / detect (push) Successful in 2s
Details
Build Container / build-dockerfile (paperless) (push) Successful in 9s
Details
Deploy Paperless-ngx document management (#328) 
## Summary

- Add paperless-ngx (v2.20.13) as a new ArgoCD-managed service on indri
- Dockerfile built from forge mirror (`mirrors/paperless-ngx`), multi-stage with s6-overlay
- PostgreSQL database via `blumeops-pg` CNPG cluster, Redis sidecar for Celery
- NFS document storage on sifaka (`/volume1/paperless`)
- Authentik OIDC SSO via baked JSON blob from 1Password
- Caddy route at `paperless.ops.eblu.me`
- 1Password item "Paperless (blumeops)" created with all secrets

## Files

- `containers/paperless/Dockerfile` — multi-stage build
- `argocd/manifests/paperless/` — full k8s manifest set
- `argocd/apps/paperless.yaml` — ArgoCD application
- `argocd/manifests/databases/` — CNPG role + ExternalSecret
- `ansible/roles/caddy/defaults/main.yml` — Caddy route
- `service-versions.yaml` — version tracking entry
- `docs/reference/services/paperless.md` — reference card

## Remaining deploy steps

1. Build container: `mise run container-build-and-release paperless`
2. Update kustomization.yaml `newTag` with actual image tag
3. Create Authentik application/provider for paperless
4. Create `paperless` database on blumeops-pg
5. Sync ArgoCD apps, then sync paperless from branch
6. Provision Caddy: `mise run provision-indri -- --tags caddy`
7. Verify at https://paperless.ops.eblu.me

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: #328
2026-04-08 17:54:12 -07:00

1.3 KiB
Raw Blame History

title modified tags
Paperless-ngx 2026-04-08
service

Paperless-ngx

Self-hosted document management system with OCR, tagging, and full-text search.

Quick Reference

Property Value
URL https://paperless.ops.eblu.me
Tailscale URL https://paperless.tail8d86e.ts.net
Namespace paperless
Image registry.ops.eblu.me/blumeops/paperless
Manifests argocd/manifests/paperless/
Container source containers/paperless/Dockerfile
Upstream paperless-ngx/paperless-ngx
Database paperless on [[postgresql
Storage NFS on sifaka at /volume1/paperless
Auth authentik OIDC + local admin

Architecture

  • Web server: Granian (ASGI), port 8000
  • Task queue: Celery worker + beat (Redis sidecar)
  • OCR: Tesseract (English)
  • Process supervisor: s6-overlay

Secrets

1Password item "Paperless (blumeops)" in vault blumeops:

  • secret-key: Django SECRET_KEY
  • postgresql-password: database credential
  • admin-password: initial admin account password
  • socialaccount-providers: OIDC provider JSON (includes Authentik client secret)

Related