blumeops/docs/reference/services
Erich Blume 07f52e9488
All checks were successful
Build Container / detect (push) Successful in 2s
Build Container / build-dockerfile (paperless) (push) Successful in 9s
Deploy Paperless-ngx document management (#328)
## Summary

- Add paperless-ngx (v2.20.13) as a new ArgoCD-managed service on indri
- Dockerfile built from forge mirror (`mirrors/paperless-ngx`), multi-stage with s6-overlay
- PostgreSQL database via `blumeops-pg` CNPG cluster, Redis sidecar for Celery
- NFS document storage on sifaka (`/volume1/paperless`)
- Authentik OIDC SSO via baked JSON blob from 1Password
- Caddy route at `paperless.ops.eblu.me`
- 1Password item "Paperless (blumeops)" created with all secrets

## Files

- `containers/paperless/Dockerfile` — multi-stage build
- `argocd/manifests/paperless/` — full k8s manifest set
- `argocd/apps/paperless.yaml` — ArgoCD application
- `argocd/manifests/databases/` — CNPG role + ExternalSecret
- `ansible/roles/caddy/defaults/main.yml` — Caddy route
- `service-versions.yaml` — version tracking entry
- `docs/reference/services/paperless.md` — reference card

## Remaining deploy steps

1. Build container: `mise run container-build-and-release paperless`
2. Update kustomization.yaml `newTag` with actual image tag
3. Create Authentik application/provider for paperless
4. Create `paperless` database on blumeops-pg
5. Sync ArgoCD apps, then sync paperless from branch
6. Provision Caddy: `mise run provision-indri -- --tags caddy`
7. Verify at https://paperless.ops.eblu.me

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: #328
2026-04-08 17:54:12 -07:00
..
1password.md
alloy.md
argocd.md
authentik.md
automounter.md
borgmatic.md Add offsite backup for immich photo library to BorgBase (#315) 2026-03-27 19:43:05 -07:00
caddy.md
cv.md Review CV doc and close build-dep review gap 2026-03-27 07:12:38 -07:00
devpi.md
docs.md
flyio-proxy.md
forgejo-runner.md Upgrade forgejo-runner 12.7.0 → 12.7.3, add service card 2026-03-30 16:31:06 -07:00
forgejo.md Remove stale Helm chart mirror references from forgejo docs 2026-04-06 07:37:21 -07:00
frigate.md Upgrade nvidia-device-plugin v0.18.2 → v0.19.0 and add reference card 2026-03-27 07:19:24 -07:00
grafana.md
immich.md Migrate Immich from Helm chart to kustomize manifests (v2.5.6 → v2.6.3) 2026-04-04 09:42:25 -07:00
jellyfin.md
kingfisher.md Build custom Kingfisher container from sporked deploy branch (#318) 2026-03-30 06:34:49 -07:00
kiwix.md
loki.md
mealie.md
miniflux.md
navidrome.md
ntfy.md
nvidia-device-plugin.md Upgrade nvidia-device-plugin v0.18.2 → v0.19.0 and add reference card 2026-03-27 07:19:24 -07:00
ollama.md
paperless.md Deploy Paperless-ngx document management (#328) 2026-04-08 17:54:12 -07:00
postgresql.md Remove superuser from teslamate PG role, transfer extension ownership 2026-04-07 15:36:39 -07:00
prometheus.md
prowler.md
snowflake-proxy.md Deploy Tor Snowflake proxy on ringtail (#311) 2026-03-24 20:51:40 -07:00
tempo.md
teslamate.md Remove superuser from teslamate PG role, transfer extension ownership 2026-04-07 15:36:39 -07:00
transmission.md
zot.md