updated app catalog with storage path option

customers/demo-felhom.yaml

@@ -4,6 +4,7 @@
 
 customer_id: demo-felhom
 domain: demo-felhom.eu
+hdd_path: /mnt/hdd_1
 gitea_repo: customers/demo-felhom-stacks
 hardware: n100
 notes: "Internal demo/test server for validating deployments"
@@ -16,6 +17,7 @@ apps:
   - homebox
   - immich
   - mealie
+  - paperless-ngx
   - romm
   - stirling-pdf
   - vaultwarden
@@ -34,6 +36,11 @@ env_vars_reference:
     DB_PASSWORD: "generate secure password"
   immich:
     DB_PASSWORD: "generate secure password"
+  paperless-ngx:
+    PAPERLESS_SECRET_KEY: "generate with: openssl rand -hex 32"
+    DB_PASSWORD: "generate secure password"
+    PAPERLESS_ADMIN_USER: "admin"
+    PAPERLESS_ADMIN_PASSWORD: "set initial password"
   romm:
     DB_PASSWORD: "generate secure password"
     MYSQL_ROOT_PASSWORD: "generate secure password"
@@ -42,19 +49,36 @@ env_vars_reference:
     ADMIN_TOKEN: "generate with: openssl rand -hex 32"
     SIGNUPS_ALLOWED: "true (set to false after account creation)"
 
+# Storage layout reference
+# This shows where user data lives after render (HDD host paths):
+#
+#   /mnt/hdd_1/                              ← HDD root (filebrowser serves this)
+#   /mnt/hdd_1/storage/immich/               ← photos & videos
+#   /mnt/hdd_1/storage/paperless/consume/    ← drop documents here for OCR
+#   /mnt/hdd_1/storage/paperless/media/      ← processed documents
+#   /mnt/hdd_1/storage/paperless/export/     ← document exports / backup
+#   /mnt/hdd_1/storage/romm/library/         ← ROM files
+#   /mnt/hdd_1/storage/romm/resources/       ← cover art, metadata
+#
+# Named volumes (on NVMe, managed by Docker):
+#   actualbudget_data, docmost_*, homebox_data, mealie_data,
+#   immich_postgres_data, paperless_data, vaultwarden_data, etc.
+
 # Backup considerations
 backup_notes:
   databases:
-    - "docmost: PostgreSQL (docmost-postgres container)"
-    - "immich: PostgreSQL (immich-postgres container)"
-    - "romm: MariaDB (romm-db container)"
-  file_volumes:
+    - "docmost: PostgreSQL (docmost-postgres)"
+    - "immich: PostgreSQL (immich-postgres)"
+    - "paperless-ngx: PostgreSQL (paperless-postgres)"
+    - "romm: MariaDB (romm-db)"
+  hdd_paths:
+    - "/mnt/hdd_1/storage/immich (photos — large, Backrest read-only mount)"
+    - "/mnt/hdd_1/storage/paperless/media (documents — Backrest read-only mount)"
+    - "/mnt/hdd_1/storage/romm/library (ROMs — Backrest read-only mount)"
+  named_volumes:
     - "actualbudget_data"
     - "docmost_storage"
-    - "filebrowser_data"
     - "homebox_data"
-    - "immich_upload (on HDD: /mnt/hdd_1/storage/immich)"
     - "mealie_data"
-    - "romm_library"
     - "stirling_data"
     - "vaultwarden_data"