Paperless-ngx, ScanservJS, Stirling PDF, and the shared document PVC declarations are now reconciled by Argo CD from homelab-gitops. Their portable charts live in separate Paperless, scanner, and PDF editor repositories. Do not apply old application manifests or deploy these workloads directly from CI.

PostgreSQL now runs in the dedicated CloudNativePG cluster and Valkey is owned by the paperless-valkey Argo Application. install.sh is retired and refuses to write to the cluster. The old YAML files are historical rollback references, not current desired state.

The retired PostgreSQL PVC requires PostgreSQL 17 if used for rollback; preserve it. Valkey carries import queue messages, not just disposable cache. Its AOF and Paperless's upload/PDF-edit staging are now persistent subdirectories on the existing CephFS claim. Never reapply the old persistence-disabled Valkey deployment.

The retained PVCs are paperless-data, paperless-runtime, and postgres-data-postgresql-0. Back up all three and the paperless-secret-key and paperless-postgres Secrets together. setup-authentik.sh remains a manual recovery tool for the existing OIDC integration and paperless-oidc Secret; install.sh does not rerun it. No CI job in this repository has Kubernetes credentials after the Argo cutover.

For normal changes use the owning chart or GitOps repository. This repository is retained for the Authentik/OIDC recovery script and historical rollback references; it has no active deployment pipeline.