# Paperless homelab dependency recovery

Paperless-ngx, ScanservJS, Stirling PDF, and the shared document PVC declarations are now reconciled by Argo CD from [homelab-gitops](https://code.brunner.ninja/feedc0de/homelab-gitops/src/branch/main/apps/paperless). Their portable charts live in separate [Paperless](https://code.brunner.ninja/feedc0de/paperless-ngx-helm), [scanner](https://code.brunner.ninja/feedc0de/scanservjs-helm), and [PDF editor](https://code.brunner.ninja/feedc0de/stirling-pdf-helm) repositories. Do not apply old application manifests or deploy these workloads directly from CI.

PostgreSQL now runs in the dedicated CloudNativePG cluster and Valkey is owned by the `paperless-valkey` Argo Application. `install.sh` is retired and refuses to write to the cluster. The old YAML files are historical rollback references, not current desired state.

The retired PostgreSQL PVC requires PostgreSQL 17 if used for rollback; preserve it. Valkey carries import queue messages, not just disposable cache. Its AOF and Paperless's upload/PDF-edit staging are now persistent subdirectories on the existing CephFS claim. Never reapply the old persistence-disabled Valkey deployment.

The retained PVCs are `paperless-data`, `paperless-runtime`, and `postgres-data-postgresql-0`. Back up all three and the `paperless-secret-key` and `paperless-postgres` Secrets together. `setup-authentik.sh` remains a manual recovery tool for the existing OIDC integration and `paperless-oidc` Secret; `install.sh` does not rerun it. No CI job in this repository has Kubernetes credentials after the Argo cutover.

For normal changes use the owning chart or GitOps repository. This repository is retained for the Authentik/OIDC recovery script and historical rollback references; it has no active deployment pipeline.