claude-botandClaude Opus 5
b784ce3d38
Migrates the Hetzner VM 'wordpress-hochzeit' into the cluster. The site is not the frozen wedding archive it looks like: it carries an unpublished, fully composed birth announcement from 2026-05-14, so wp-admin has to keep working for a human author rather than being replaced by a Git workflow. Split routing on one host: '/' goes straight to WordPress so the blog stays publicly readable, while /wp-admin and /wp-login.php route through a dedicated wordpress-gate outpost. The inverse -- gate the host and skip_path_regex the public paths, as paperless-gate does -- would need a negative lookahead, and the outpost's RE2 has none. Gating all of /wp-admin is only safe because the dead wpgiftregistry plugin is dropped in the migration: it was the sole emitter of ajaxurl on this site, and of 121 admin-ajax hits in the current log window not one returned 200. Core lives in the pinned image, not on the volume, so upgrading is a tag bump in Git. Only wp-content is persisted. Backups are split the same way CNPG/Barman and Velero are elsewhere: the operator takes a logical dump to Hetzner Object Storage at 02:45, Velero takes the wp-content PVC at 08:45 and skips the database volume -- a crash-consistent snapshot of a running database is not a backup. Group membership for the gate is owned by Git, as with the Home Assistant, Shelly and zone-configurator gates. s.renner is the Authentik account for the site's WordPress Editor, whose login there is still the pre-2019 s.birzer. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014giKN9N6e5J2DF8QZmVh98