feat(supabase): add services and statefulset for database management

feat(synapse): update ingress to use traefik ingress class and bump version

feat(syncthing-discovery): introduce syncthing discovery service with deployment and ingress

feat(syncthing-relay): add syncthing relay server with deployment and ingress configuration

fix(taiga): update liveness and readiness probes to use tcpSocket for health checks

fix(taiga): change PVC access mode to ReadWriteMany for media and static storage

feat(traefik): add icon and ignore rules for traefik service

docs(ushahidi): add notes for Redis configuration and Laravel startup probe adjustments

feat(ushahidi): implement dedicated Redis deployment for Ushahidi

fix(vllm): update deployment strategy and readiness/liveness probes for improved stability

fix(writefreely): pin writefreely image version to v0.15.1 for consistency

docs(zulip): add notes for TLS-terminating reverse proxy configuration and expected behavior

pixelfed/notes.md

@@ -0,0 +1,21 @@
+# Pixelfed — Notes
+
+## mattlqx/docker-pixelfed: APP_PORT required
+
+The `ghcr.io/mattlqx/docker-pixelfed` community image generates its nginx config from env vars
+using `sed`. The `listen` directive uses `${APP_PORT}`, which must be set explicitly — without it,
+nginx crashes with `invalid number of arguments in 'listen' directive`.
+
+```yaml
+env:
+  - name: APP_PORT
+    value: "80"
+```
+
+The image listens on port 80 (nginx), not 8080 as the original pixelfed image did.
+
+## Shared storage PVC requires ReadWriteMany
+
+Both the web and worker deployments must mount the shared storage PVC simultaneously. Use
+`ReadWriteMany` access mode — `ReadWriteOnce` with two pods causes multi-attach errors.
+(`RollingUpdate` + RWO also triggers this; use `Recreate` strategy or RWX.)