CPX41 upgrade; stash redeployed behind basicAuth

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

docs/inventory.md

@@ -265,3 +265,14 @@ compose is redeployed. Stale labels keep routing the old hostname.
 | Env | `IMMICH_VERSION=release`, `DB_PASSWORD` in Dokploy compose env |
 | Notes | First registered account becomes admin. iPhone app → server URL → background backup. Mac Photos library migration planned via osxphotos → immich CLI. |
 
+
+### stash
+
+> Stash — personal media organizer (basic-auth protected)
+
+| | |
+|---|---|
+| Compose ID | in Dokploy (appName `stash-tzmac9`, raw) |
+| URL | https://stash.kennethreitz.org (container port 9999) |
+| Auth | Traefik `basicAuth` middleware `stash-auth` (defined via `settings.updateMiddlewareTraefikConfig`; domain references it as `stash-auth@file` — ⚠️ the `@file` provider suffix is required or the router 404s) + Stash's own login once configured |
+| Data | `/mnt/objects/stash/{config,media,metadata,cache,blobs,generated}` on the volume |

docs/server.md

@@ -18,9 +18,9 @@
 |---|---|
 | OS | Ubuntu 26.04 LTS |
 | Kernel | 7.0.0-15-generic |
-| Server type | Hetzner Cloud CPX31 (id `136742397`, dc `ash-dc1`) |
-| CPU | 4 vCPU |
-| RAM | 7.6 GiB |
+| Server type | Hetzner Cloud CPX41 (upgraded from CPX31 2026-06-05; 8 vCPU, 15.6 GiB; root disk kept at 150 GB for downgrade flexibility) (id `136742397`, dc `ash-dc1`) |
+| CPU | 8 vCPU |
+| RAM | 15.6 GiB |
 | Disk | 150 GB (`/dev/sda1`) |
 | Volume | `mercury-objects` (id `105925944`), 750 GB ext4 at `/mnt/objects` (fstab, nofail) — MinIO data |
 | Swap | 4 GB swapfile (`/swapfile`, swappiness 10) — added 2026-06-05 after Immich's arrival OOM-killed the Dokploy service (exit 137 loop → bad gateway). Immich server/ML now carry 2g/1.5g mem_limits. |