Wikipedia-style, bilingual (de/en) articles generated from the wiki,
with public/private split via Authentik group, LAN/NetBird only.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

@@ -0,0 +87,4 @@
+- **There is one hostname: `wiki.renner.uno`.** The service already does OIDC itself, so it knows whether a reader is signed in. Only wiki-group members can sign in, because of the policy binding.
+  - The encyclopedia routes allow anonymous readers. Every other route keeps requiring a login.
+  - For an anonymous reader, private sections and private articles are left out of the HTML entirely, not merely hidden. A "log in to see more" link starts the OIDC login.
+  - The host stays LAN- and NetBird-only, as it is today: there is no `dns.renner.uno/public` label.

@@ -0,0 +90,4 @@
+  - The host stays LAN- and NetBird-only, as it is today: there is no `dns.renner.uno/public` label.
+- **Articles go live without human approval**, as the owner decided. The service commits generated articles directly to the notes repo, the same way it already commits raw deposits. Leak protection is therefore entirely automatic and has three layers:
+  - the writer marks content private;
+  - a deterministic filter on the public text catches IP addresses (v4 and v6), hostnames and FQDNs, HA entity IDs, MACs, file paths, and OpenBao or secret paths. Any match moves the paragraph into a private section;