Files

dtoro 4efddb8bed docs: fix pre-existing broken links surfaced by docs-lint

Problem: docs-lint (added in the wiki-hq reorg) surfaced 126 broken relative
links that predated this session — a container rename, incident/plan docs
that moved into archive/done subfolders without their inbound links being
updated, and a handful of relative-depth bugs in files nested under
containers/archive/ and plans/done/.

Fixes applied, by category:
- 124-authentik.md -> 106-auth-outpost.md (container was renamed; ~40 refs).
- investigations/{2026-04-21-hubris-crash-loop,2026-05-31-authentik-vps-migration}.md
  -> archive/ prefix (both moved to investigations/archive/ previously).
- plans/{2026-06-01-slate-ax-to-sodola-migration,2026-06-04_130000-deprecate-claudio-bot,
  2026-06-25-yuvomi-deployment}.md -> plans/done/ prefix.
- Depth bugs in files nested one level deeper than their siblings assumed
  (investigations/archive/*, knowledge/wiki/containers/archive/*,
  plans/done/*) — corrected relative-path depth.
- Destroyed containers with no surviving page (126-plato) delinked to the
  containers/index.md archaeology row instead of a 404.
- ludo-mini.yaml -> strong.yaml (host was renamed, same physical machine).
- netbird-vps.md (no narrative page exists) -> netbird-vps.yaml (substrate
  record, matching the existing convention for hosts without a wiki page).
- runbook-dpkg-interrupted.md refs -> .agents/skills/runbook-dpkg-interrupted/SKILL.md
  (missed in the phase-4 runbook move because the referencing files used a
  bare filename, not a runbooks/ prefix).
- One dangling forward-reference to a never-written investigation delinked
  to the actual incident record it was describing.

Left alone: two links in knowledge/wiki/containers/101-jellyfin.md into
devops/homelab-authentik-admin/ — an intentional reference to a sibling repo,
not present in this checkout.

Verification: broken-link count 126 -> 2 (real remainder is the cross-repo
reference above); gen-topology.py --check still exit 0; build_host_files.py
still idempotent; all inventory.yaml doc_page targets still resolve.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-06 17:53:35 +02:00

1.9 KiB

Raw Blame History

103 — `paperless`

Paperless-ngx for document management. Ingests scans / PDFs from /mnt/library/documents and serves OCR'd indexed copies.

At a glance

Hostname: paperless
IP: 192.168.8.130
Privilege: privileged
Resources: 2 cores / 3 GiB RAM / 8 GiB rootfs
Mounts: /mnt/library ↔ /mnt/library (consumes documents/)
Public hostname: paperless.hubris.network → caddy → :8000

Service / port map

Service	Listen	Notes
paperless-webserver	`:8000`	HTTP
paperless-task-queue, paperless-scheduler, paperless-consumer	—	systemd workers

Auth

Behind Authentik forward-auth. API path /api/* bypasses forward-auth (mobile clients can't follow the browser login redirect; bearer token still enforces auth on /api). Header propagation: PAPERLESS_ENABLE_HTTP_REMOTE_USER=true and PAPERLESS_HTTP_REMOTE_USER_HEADER_NAME=HTTP_X_AUTHENTIK_USERNAME in /opt/paperless/paperless.conf. Django auto-creates matching users on first SSO login.

Storage

Documents at /mnt/library/documents (owner www-data:www-data, mode 750 — not on the media group, by design).

Known issues

~~Disk usage was 86.9% at last legacy monitor reading on 2026-04-21~~ — resolved by growing rootfs to 16 GiB on 2026-05-15.

Changelog

2026-04-28 — wiki entry created

Initial documentation.

2026-04-21 — wired into Authentik forward-auth

Cookie-domain-level proxy provider, embedded outpost binding. /api/* bypass added in Caddy site block to keep mobile clients working.

1.9 KiB Raw Blame History

103 — paperless