feat(productivity): complete Stirling PDF integration + comprehensive README [Bounty #5, 60]

[sungdark]

Summary

This PR completes the Productivity Stack (Bounty #5) by:

Changes

1. Added Stirling PDF service ()

   • Full Traefik labels with TLS
   • Health check via
   • Volumes for data persistence and custom files
   • Watchtower support

2. Created comprehensive README.md with:

   • Architecture diagram
   • Quick start guide
   • Per-service configuration (Gitea, Vaultwarden, Outline, Stirling PDF, BookStack)
   • Authentik OIDC setup for each service
   • Health endpoint reference
   • Environment variables reference
   • Common problems troubleshooting
   • Backup integration guide

3. Improved docker-compose.yml:

   • Fixed Gitea to use subdomain
   • Added security headers middleware to all Traefik routers
   • Consistent health check patterns across all services
   • Added for slow-starting services

4. Enhanced .env.example:

   • Organized into clear sections
   • Added documentation for each variable
   • Prerequisites listed clearly

Services (5 total)

Service	Subdomain	Port
Gitea	git.	3000
Vaultwarden	vault.	80
Outline	docs.	3000
Stirling PDF	pdf.	8080
BookStack	wiki.	80

Acceptance Criteria

• Gitea accessible at https://git.${DOMAIN} with Authentik OIDC
• Vaultwarden accessible at https://vault.${DOMAIN}, admin panel protected
• Outline accessible at https://docs.${DOMAIN} with Authentik OIDC
• Stirling PDF accessible at https://pdf.${DOMAIN}
• BookStack accessible at https://wiki.${DOMAIN} with Authentik OIDC
• All services have healthchecks
• README documents all setup steps
• No hardcoded passwords (all via .env)
• Traefik reverse proxy + HTTPS configured
• All images pinned to specific version tags

Testing

All compose files validated:

docker compose -f stacks/productivity/docker-compose.yml config --quiet

---

Payment Address: eB51DWp1uECrLZRLsE2cnyZUzfRWvzUzaJzkatTpQV9 (USDT TRC20)