Paperless-ngx

Self-hosted document management system with OCR, tagging, and full-text search.

Quick Reference

Property	Value
URL	https://paperless.ops.eblu.me
Tailscale URL	https://paperless.tail8d86e.ts.net
Namespace	paperless
Image	registry.ops.eblu.me/blumeops/paperless
Manifests	argocd/manifests/paperless/
Container source	containers/paperless/Dockerfile
Upstream	paperless-ngx/paperless-ngx
Database	paperless on blumeops-pg
Storage	NFS on sifaka at /volume1/paperless
Auth	authentik OIDC + local admin

Architecture

• Web server: Granian (ASGI), port 8000
• Task queue: Celery worker + beat (Redis sidecar)
• OCR: Tesseract (English)
• Process supervisor: s6-overlay

Secrets

1Password item “Paperless (blumeops)” in vault blumeops:

• secret-key: Django SECRET_KEY
• postgresql-password: database credential
• admin-password: initial admin account password
• socialaccount-providers: OIDC provider JSON (includes Authentik client secret)

Related

• adding-a-service — Deployment tutorial
• authentik — SSO provider