## Stack

- **Language:** Kubernetes manifests + Helm values, Bash Make targets
- **Key deps:** CloudNative-PG (cnpg) clusters, OpenBao, SOPS/age; runs against the S2 cluster on railiance01. Bitnami postgresql-ha is retired. Valkey is declared, not deployed.

## Dev Commands

```bash
make help              # list all targets (db-*, apps-pg-*, openbao-*)
make db-status         # gitea-db / forgejo-db cnpg cluster health (read-only)
make apps-pg-status    # shared apps-pg cluster health (read-only)
make pg-status         # confirms retired Bitnami postgresql-ha is absent
make valkey-status     # confirms Valkey is absent
make consumption-preflight CONSUMING_ENTITY=entity:<slug> ESTIMATE_EUR=<eur>
make db-deploy | apps-pg-deploy   # production-touching
```

`pg-deploy` and `valkey-deploy` are fail-closed. `*-status` / `*-logs`
targets are read-only and safe.