docs following git-ops reestructure

.gitignore

@@ -1,16 +1,15 @@
-media/
-default/*tt*
-default/havenllo*
-certs/ca*
-
-lab/*
-sandbox/*
-!lab/nfs-pod.yaml
-
-rbac
-cronjobs
-
 *.crt
 *.key
+*.pem
+*.pfx
 
-chacal/
+# Secrets & Environment files
+.env
+.env.*
+*.env
+group_vars/**/vault.yml
+!group_vars/**/vault.yml.example
+*kubeconfig*
+
+# Ansible artifacts
+*.retry

README.md

@@ -12,57 +12,25 @@ For setup details, see [SETUP.md](SETUP.md).
 
 The repository name references my local TLD, `.haven` ;)
 
-## Namespaces
+## Repository Layout
-- default
+```
-    - ArchiveBox
+haven/
-    - Homarr
+├── bootstrap/
-    - Homepage
+│   ├── namespaces.yaml        # cluster namespaces
-    - It-tools
+│   ├── secretstores.yaml      # cluster secret stores for BitWarden ESO
-    - Notepad
+│   ├── address-pool.yaml      # cluster IP pool for MetalLB
-    - Searxng
+│   ├── argocd-install/        # Argo CD install manifests + ingress
-    - Uptimekuma
+│   └── root-app.yaml          # root Application watching apps/root
-    - Vaultwarden
+├── secrets/
-    - OpenWebUI
+│   ├── adguard.yaml           # adguard credentials from BitWarden
-    - Paperless
+│   ├── <app>.yaml             # <app> credentials from BitWarden
-- cloud
+│   └── ...
-    - Cloudreve
+├── apps/
-    - Slink
+│   ├── root/
-- dns
+│   │   ├── kustomization.yaml # points to applicationset.yaml
-    - AdGuardHome
+│   │   └── applicationset.yaml# auto-discovers apps/*/*.yaml
-    - AdGuardSync
+│   └── <namespace>/           # e.g., dev/, default/, infra/, monitoring/
-- infra
+│       ├── <app-1>.yaml       # all-in-one manifest per app
-    - [Haven Notify](https://git.ivanch.me/ivanch/server-scripts/src/branch/main/haven-notify)
+│       ├── <app-2>.yaml       # ...
-    - Beszel
+|       └──── ...
-    - Beszel Agent (running as a DaemonSet)
+```
-    - Code Config (VS Code for internal config editing)
-    - WireGuard Easy
-- dev
-    - Gitea Runner (x64)
-    - Gitea Runner (arm64)
-- monitoring
-    - Grafana
-    - Prometheus
-    - Node Exporter
-    - Kube State Metrics
-    - Loki
-    - Alloy
-
-#### Miscellaneous namespaces
-
-- lab (a playground/sandbox namespace)
-    - nfs-pod (for testing and accessing NFS mounts)
-- metallb-system
-    - MetalLB components
-- cert-manager
-    - cert-manager components
-- docker-ingress
-    - nginx ingress controller components for Docker-based services
-
-## Todo
-- Move ArchiveBox data to its own PVC on the NAS
-- Move Uptime Kuma to the infra namespace
-- Add links to each application's documentation
-- Add links to server scripts
-- Move Alloy to the monitoring namespace
-- Install Loki, Grafana, and Prometheus via Helm charts
-- Configure Loki and Prometheus to use PVCs