Rework Paperless-ngx around Caddy, network, and storage roles

paperless-ngx/readme.md

@@ -4,3 +4,16 @@ Create a super user inititally:
 ```shell
 docker exec -it paperless-ngx python3 manage.py createsuperuser
 ```
+
+## Storage (AWS only)
+
+The VPS holds only paperless's small `data` dir. Everything else is mounted with rclone
+(systemd units `paperless-*.service`, config in `/etc/rclone-paperless.conf`):
+
+- `consume`: Nextcloud WebDAV folder (`nextcloud_consume_path`). Drop files in it from Nextcloud and
+  paperless ingests them (polled every 60s, as inotify does not work on WebDAV).
+- `export`: Nextcloud WebDAV folder (`nextcloud_export_path`), filled nightly by `document_exporter`.
+- `media`: an S3 bucket (`s3_bucket`), cached locally up to 2G. Use a different bucket from Nextcloud's.
+
+Set `nextcloud_app_password` and the S3 keys in `vars/default.yml` (ideally via ansible-vault).
+paperless does not officially support S3 for media, so expect it to be slower, and keep S3 versioning on.