| Property | Value |
|---|---|
| Host VM | VM-RZ-SVC-PROD-01 |
| Compose path | /opt/wiki/compose.yml |
| Image | harbor.blackreset.com/dockerhub/requarks/wiki:2.5.307 (proxy-cached via Harbor) |
| Container name(s) | wiki-app |
| External URL | https://wiki.blackreset.com |
| Networks | traefik_backend (shared with postgres_production for DB connection) |
| DB / state | Postgres auf VM-RZ-DB-01 (PG 17.6), DB wikijs, Role wikijs (least-privilege) |
| Auth | Local DB admin (fallback) + Authentik OIDC (grp-wiki-admin -> manage:system) |
| Backup | PBS VM-image-level (covers app data volume + DB schema). |
Single source of truth for the blackreset infrastructure: sites, hosts, VMs, services, access, standards, runbooks. Replaces BookStack as of 2026-04-29 — see Migration / Wiki cutover.
wiki-app is the only container in the stack. State lives in the shared postgres_production Postgres instance (schema wikijs) and a Docker named volume (wiki_wikijs_app_data) for uploads + cache. No DB sidecar — the BookStack-era MariaDB sidecar pattern was retired.
Compose at /opt/wiki/docker-compose.yml, secrets in /opt/wiki/.env (mode 600). Required env: DB_USER, DB_PASS, DB_NAME, plus image-fixed defaults (HA_ACTIVE=false, DB_TYPE=postgres, DB_HOST=postgres_production, DB_PORT=5432, TRUST_PROXY=true).
Traefik labels expose wiki.blackreset.com on websecure with Let's Encrypt cert via the letsencrypt resolver. HTTP -> HTTPS redirect router on web. Security headers middleware: HSTS preload, X-Frame-Options DENY, X-Robots-Tag for no-index.
Local strategy (admin email alex@korff.wtf, password in WIKIJS__ADMIN_PASSWORD) is the fallback if Authentik is down. Primary login is the Authentik OIDC strategy (UUID 94a79f81-df94-4b17-a946-033dce4c9ca4, callback /login/<UUID>/callback). Group claim groups from Authentik is matched by exact name to a Wiki.js group; users in Authentik grp-wiki-admin get the Wiki.js group grp-wiki-admin with manage:system permission (= full admin).
Postgres schema wikijs (in postgres_production) holds page content, history, settings, sessions. Docker named volume wiki_wikijs_app_data mounted at /wiki/data holds uploads and runtime cache.
PBS image-level backup of VM-SL-00 covers everything (DB + uploads). The previous BookStack stack remains archived at /opt/wiki-bookstack-archive/ on VM-SL-00 with cold MariaDB datadir snapshot, plus the original Docker volumes left intact. Rollback procedure documented at Migration / Wiki cutover.
cd /opt/wiki && docker compose restart wiki-appdocker logs --since 1h wiki-appimage tag in compose, docker compose pull && docker compose up -dWIKIJS__API_KEY in .secrets/credentials.env (JWT, expires 2027-04-29)Wiki.js wurde am 2026-05-01 (Phase 7) von vm-sl-00 auf vm-rz-svc-prod-01 verschoben. Die Postgres-DB liegt zentral auf vm-rz-db-01:5432/wikijs. BookStack-Rollback ist obsolet sobald vm-sl-00 final shutdown ist (Bestand in PBS-Image-Backups).