blumeops/containers
Erich Blume 07f52e9488
All checks were successful
Build Container / detect (push) Successful in 2s
Build Container / build-dockerfile (paperless) (push) Successful in 9s
Deploy Paperless-ngx document management (#328)
## Summary

- Add paperless-ngx (v2.20.13) as a new ArgoCD-managed service on indri
- Dockerfile built from forge mirror (`mirrors/paperless-ngx`), multi-stage with s6-overlay
- PostgreSQL database via `blumeops-pg` CNPG cluster, Redis sidecar for Celery
- NFS document storage on sifaka (`/volume1/paperless`)
- Authentik OIDC SSO via baked JSON blob from 1Password
- Caddy route at `paperless.ops.eblu.me`
- 1Password item "Paperless (blumeops)" created with all secrets

## Files

- `containers/paperless/Dockerfile` — multi-stage build
- `argocd/manifests/paperless/` — full k8s manifest set
- `argocd/apps/paperless.yaml` — ArgoCD application
- `argocd/manifests/databases/` — CNPG role + ExternalSecret
- `ansible/roles/caddy/defaults/main.yml` — Caddy route
- `service-versions.yaml` — version tracking entry
- `docs/reference/services/paperless.md` — reference card

## Remaining deploy steps

1. Build container: `mise run container-build-and-release paperless`
2. Update kustomization.yaml `newTag` with actual image tag
3. Create Authentik application/provider for paperless
4. Create `paperless` database on blumeops-pg
5. Sync ArgoCD apps, then sync paperless from branch
6. Provision Caddy: `mise run provision-indri -- --tags caddy`
7. Verify at https://paperless.ops.eblu.me

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: #328
2026-04-08 17:54:12 -07:00
..
alloy Localize authentik-redis container (#309) 2026-03-24 13:27:36 -07:00
authentik Upgrade authentik 2026.2.0 → 2026.2.2 (patch release) 2026-04-08 10:53:03 -07:00
authentik-redis Localize authentik-redis container (#309) 2026-03-24 13:27:36 -07:00
cv Add consistent OCI labels to all container Dockerfiles 2026-03-18 20:42:00 -07:00
devpi Add consistent OCI labels to all container Dockerfiles 2026-03-18 20:42:00 -07:00
grafana Upgrade Grafana 12.3.3 → 12.4.2 (#322) 2026-04-02 11:33:19 -07:00
grafana-sidecar Add consistent OCI labels to all container Dockerfiles 2026-03-18 20:42:00 -07:00
homepage Upgrade Homepage container to v1.11.0 2026-03-26 10:17:36 -07:00
kingfisher Fix Kingfisher container: make /tmp world-writable 2026-03-30 06:53:34 -07:00
kiwix-serve Add consistent OCI labels to all container Dockerfiles 2026-03-18 20:42:00 -07:00
kube-state-metrics Localize kube-state-metrics container (Dockerfile + nix) (#327) 2026-04-07 16:09:25 -07:00
kubectl Add consistent OCI labels to all container Dockerfiles 2026-03-18 20:42:00 -07:00
loki Update loki to 3.6.7 (#302) 2026-03-20 16:02:28 -07:00
mealie Add consistent OCI labels to all container Dockerfiles 2026-03-18 20:42:00 -07:00
miniflux Add consistent OCI labels to all container Dockerfiles 2026-03-18 20:42:00 -07:00
navidrome Add consistent OCI labels to all container Dockerfiles 2026-03-18 20:42:00 -07:00
ntfy Localize authentik-redis container (#309) 2026-03-24 13:27:36 -07:00
paperless Deploy Paperless-ngx document management (#328) 2026-04-08 17:54:12 -07:00
prometheus Add consistent OCI labels to all container Dockerfiles 2026-03-18 20:42:00 -07:00
prowler Add Prowler image vulnerability scanning for blumeops containers 2026-03-24 16:43:08 -07:00
quartz Add consistent OCI labels to all container Dockerfiles 2026-03-18 20:42:00 -07:00
runner-job-image Add consistent OCI labels to all container Dockerfiles 2026-03-18 20:42:00 -07:00
tempo Build Tempo container from source (2.10.3) (#323) 2026-04-02 13:45:02 -07:00
teslamate Add consistent OCI labels to all container Dockerfiles 2026-03-18 20:42:00 -07:00
transmission Add consistent OCI labels to all container Dockerfiles 2026-03-18 20:42:00 -07:00
transmission-exporter Add consistent OCI labels to all container Dockerfiles 2026-03-18 20:42:00 -07:00
unpoller Add consistent OCI labels to all container Dockerfiles 2026-03-18 20:42:00 -07:00