# Wiki browser

Read-only HTTP view of `/home/kaburu/wiki` on **kaburuaibox**.

## URLs

| Path | URL |
|------|-----|
| Portal | http://192.168.0.253:8780/ |
| Tailscale | http://100.120.18.44:8780/ |
| A/B dashboard | http://192.168.0.253:8780/wiki/procedures/eval-ab-dashboard/ |
| Procedures | http://192.168.0.253:8780/wiki/procedures/ |
| Core SOP | http://192.168.0.253:8780/wiki/procedures/kaburu-core-sop.md |

Phone/PC on LAN DNS (OPNsense): use LAN IP until `wiki.kaburu.lan` is added to Caddy.

## Stack

- Docker container: **`wiki-static`** (`nginx:alpine`)
- Publish: `0.0.0.0:8780→80`
- Mount: `/home/kaburu/wiki` → `/usr/share/nginx/html` **ro**
- Config: `/home/kaburu/wiki-static-nginx.conf` (autoindex on)
- Restart: `unless-stopped`

```bash
docker ps --filter name=wiki-static
docker logs wiki-static --tail 50
docker restart wiki-static
```

## Permissions

nginx runs as non-root and must **traverse** `/home/kaburu` (`o+x`) and **read** the wiki tree (`a+rX`). New files under wiki should stay world-readable for the browser.

## Optional next

Add OPNsense Caddy host `wiki.kaburu.lan` → `192.168.0.253:8780` (HTTP backend) for HTTPS + pretty name.