## Stack

- **Language:** Kubernetes manifests + Helm values, Bash Make targets
- **Key deps:** CloudNative-PG (cnpg) clusters, Valkey, OpenBao, SOPS/age; runs against the S2 cluster on railiance01

## Dev Commands

```bash
make help              # list all targets (db-*, apps-pg-*, pg-*, valkey-*, openbao-*)
make db-status         # gitea-db cnpg cluster health (read-only)
make apps-pg-status    # shared apps-pg cluster health (read-only)
make pg-status         # standalone PostgreSQL HA pod status (read-only)
make valkey-status     # Valkey pod status (read-only)
make db-deploy | apps-pg-deploy | pg-deploy | valkey-deploy   # production-touching
```

`*-deploy` targets change production platform services — operator approval
required. `*-status` / `*-logs` targets are read-only and safe.