Erich Blume 07f52e9488 Deploy Paperless-ngx document management (#328) ... ## Summary - Add paperless-ngx (v2.20.13) as a new ArgoCD-managed service on indri - Dockerfile built from forge mirror (`mirrors/paperless-ngx`), multi-stage with s6-overlay - PostgreSQL database via `blumeops-pg` CNPG cluster, Redis sidecar for Celery - NFS document storage on sifaka (`/volume1/paperless`) - Authentik OIDC SSO via baked JSON blob from 1Password - Caddy route at `paperless.ops.eblu.me` - 1Password item "Paperless (blumeops)" created with all secrets ## Files - `containers/paperless/Dockerfile` — multi-stage build - `argocd/manifests/paperless/` — full k8s manifest set - `argocd/apps/paperless.yaml` — ArgoCD application - `argocd/manifests/databases/` — CNPG role + ExternalSecret - `ansible/roles/caddy/defaults/main.yml` — Caddy route - `service-versions.yaml` — version tracking entry - `docs/reference/services/paperless.md` — reference card ## Remaining deploy steps 1. Build container: `mise run container-build-and-release paperless` 2. Update kustomization.yaml `newTag` with actual image tag 3. Create Authentik application/provider for paperless 4. Create `paperless` database on blumeops-pg 5. Sync ArgoCD apps, then sync paperless from branch 6. Provision Caddy: `mise run provision-indri -- --tags caddy` 7. Verify at https://paperless.ops.eblu.me 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: #328		2026-04-08 17:54:12 -07:00
..
1password-connect-ringtail.yaml	Migrate 1Password Connect from Helm to kustomize (1.8.1 → 1.8.2) (#326)	2026-04-06 07:31:40 -07:00
1password-connect.yaml	Migrate 1Password Connect from Helm to kustomize (1.8.1 → 1.8.2) (#326)	2026-04-06 07:31:40 -07:00
alloy-k8s.yaml
alloy-ringtail.yaml
alloy-tracing-ringtail.yaml	Add OpenTelemetry distributed tracing (Tempo + Beyla eBPF) (#286)	2026-03-05 10:51:07 -08:00
apps.yaml
argocd.yaml	Upgrade ArgoCD v3.2.6 → v3.3.2 with Server-Side Apply (#272)	2026-02-26 06:51:50 -08:00
authentik.yaml
blumeops-pg.yaml
cloudnative-pg.yaml
cv.yaml
devpi.yaml
docs.yaml
external-secrets-crds-ringtail.yaml	Upgrade External Secrets Operator v2.2.0 + migrate Helm to kustomize (#312)	2026-03-25 15:56:41 -07:00
external-secrets-crds.yaml	Upgrade External Secrets Operator v2.2.0 + migrate Helm to kustomize (#312)	2026-03-25 15:56:41 -07:00
external-secrets-ringtail.yaml	Upgrade External Secrets Operator v2.2.0 + migrate Helm to kustomize (#312)	2026-03-25 15:56:41 -07:00
external-secrets.yaml	Upgrade External Secrets Operator v2.2.0 + migrate Helm to kustomize (#312)	2026-03-25 15:56:41 -07:00
forgejo-runner.yaml	Switch forgejo-runner ArgoCD app to internal SSH repo URL	2026-03-03 10:43:01 -08:00
frigate.yaml
grafana-config.yaml
grafana.yaml
homepage.yaml
immich.yaml	Migrate Immich from Helm chart to kustomize manifests (v2.5.6 → v2.6.3)	2026-04-04 09:42:25 -07:00
kingfisher.yaml	Build custom Kingfisher container from sporked deploy branch (#318)	2026-03-30 06:34:49 -07:00
kiwix.yaml
kube-state-metrics-ringtail.yaml
kube-state-metrics.yaml
loki.yaml
mealie.yaml	Deploy Mealie recipe manager (#299)	2026-03-16 21:59:10 -07:00
miniflux.yaml
navidrome.yaml
ntfy.yaml
nvidia-device-plugin.yaml
ollama.yaml	Deploy Ollama LLM server on ringtail (#277)	2026-03-02 20:39:51 -08:00
paperless.yaml	Deploy Paperless-ngx document management (#328)	2026-04-08 17:54:12 -07:00
prometheus.yaml
prowler.yaml	Deploy Prowler CIS scanner (#310)	2026-03-24 16:08:09 -07:00
tailscale-operator-ringtail.yaml	Fix ArgoCD apps app permanent OutOfSync	2026-03-22 20:42:37 -07:00
tailscale-operator.yaml	Fix ArgoCD apps app permanent OutOfSync	2026-03-22 20:42:37 -07:00
tempo.yaml	Add OpenTelemetry distributed tracing (Tempo + Beyla eBPF) (#286)	2026-03-05 10:51:07 -08:00
teslamate.yaml
torrent.yaml
unpoller.yaml	Add UnPoller for UniFi network metrics (#298)	2026-03-16 15:52:45 -07:00