4 Commits

Author SHA1 Message Date
00c7ec292f gongme: k8s Manifeste fuer initialen Cluster-Deploy
Namespace, StorageClass (Longhorn), Postgres, API, Web,
OAuth2-Proxy (Zitadel OIDC) und Traefik-Ingress fuer
https://gongme.expertfab.de.

Images: git.expertfab.de/expertfab/ef-gongme-{api,web}:latest
Auth: Zitadel hinter OAuth2-Proxy v7.7.1
TLS: cert-manager letsencrypt-ClusterIssuer

secret-oauth2.yaml enthaelt Platzhalter — CLIENT_ID/SECRET
muessen nach Zitadel-App-Anlage eingetragen werden.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-06-07 13:19:46 +02:00
c48ab60392 Migrate Joplin to K3s and add existing k8s manifests
- New k8s/joplin/ deployment for note.expertfab.de (Postgres + Server +
  Traefik ingress with cert-manager), replicas=2 to match cluster size
- coredns-custom.yaml: route note.expertfab.de internally to Traefik LB
- Commit previously-built k8s manifests (documenso, erpnext oauth2-proxy,
  paperless oauth2-proxy) that were running but not in git
- docs/access.md: add Joplin section and Documenso/Cloudflare entries

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-28 20:17:19 +02:00
2f8fb1349c Add storage flow & HA analysis diagram
Graphviz DOT-based diagram showing the complete storage path:
App pods → PVCs (StorageClass/Retain-Policy) → Longhorn replicas →
K3s worker nodes → Proxmox hosts.

HA analysis annotated with color coding:
- Red: SPOF (control-plane on n01, share-manager on n01)
- Orange: Degraded on failure (CSI controllers on n02, RWX volumes)
- Green: HA covered (2 Longhorn replicas on different Proxmox hosts)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-03 14:00:45 +02:00
bbe86c55d9 Initial commit: Infrastructure documentation
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-03 13:46:47 +02:00