Add catalog/plex.yaml (kind: container) and its rendered apps/plex.yaml, and wire apps/kustomization.yaml. Plex = docs/13 row 1, the catalog's largest service; validates the public-exposure + config-on-Longhorn path. - image plexinc/pms-docker (pinned recent stable tag), port 32400 - exposure: public at plex.home.keithjackson.dev; egress: internet - auth: native (Plex accounts, not Keycloak — docs/13/15 exception) - config PVC 20Gi on longhorn; off-cluster backup (daily-offcluster) as the longhorn tier forbids reacquirable under L0 (R-STATE-03) - observability up-SLI; update channel stable Bulk media (R-STATE-04) deferred: the `bulk` StorageClass is a documented stub (OQ-2 unresolved, NFS CSI not installed) so a bulk PVC would leave the pod Pending. Media mount omitted; attach once bulk provisions. Traces: R-GITOPS-02, R-NET-01/02/05, R-STATE-01/02/03, R-TLS/R-DNS, R-OBS-01, R-UPD-01/03, R-IDP-02, R-PLAT-02. Co-Authored-By: Claude Opus 4.8 <[email protected]>
apps
Placeholder — populated in Phase 0. See ../home-network-k3s (read-only spec).