Initial DevOpsDash — FastAPI + Alpine.js dashboard for DevOpsMCP

- Taskz kanban board (create/edit tasks, findings, status/priority)
- Worklog timeline + standup summary (proxied from DevOpsMCP MCP API)
- Knowledge browser (ADRs, memories, knowledge catalog files)
- FastAPI backend reading same Redis as DevOpsMCP
- Read-only bind-mount for DevOpsMCP data directory (/data)
- Nomad job spec (dash.i80.dk, Traefik TLS, host volume read-only)
- Gitea Actions CI → registry.i80.dk/gitea/devops-dash:latest

devops-dash.nomad

@@ -0,0 +1,84 @@
+job "devops-dash" {
+  datacenters = ["dc1"]
+  type        = "service"
+
+  constraint {
+    attribute = "${node.unique.name}"
+    value     = "autobox.i80.dk"
+  }
+
+  group "devops-dash" {
+    count = 1
+
+    network {
+      port "http" {}
+    }
+
+    volume "devops-mcp-data" {
+      type      = "host"
+      read_only = true
+      source    = "devops-mcp-data"
+    }
+
+    task "devops-dash" {
+      driver = "docker"
+
+      volume_mount {
+        volume      = "devops-mcp-data"
+        destination = "/data"
+        read_only   = true
+      }
+
+      config {
+        image = "registry.i80.dk/gitea/devops-dash:latest"
+        ports = ["http"]
+
+        auth {
+          username       = "robot$gitserver"
+          password_env   = "REGISTRY_TOKEN"
+          server_address = "registry.i80.dk"
+        }
+      }
+
+      template {
+        data = <<EOF
+REGISTRY_TOKEN={{ key "harbor/robot/token" }}
+EOF
+        destination = "secrets/env.sh"
+        env         = true
+      }
+
+      env {
+        PORT           = "${NOMAD_PORT_http}"
+        REDIS_URL      = "redis://192.168.15.124:6379"
+        DEVOPS_MCP_URL = "http://devops-mcp.i80.dk"
+        DATA_DIR       = "/data"
+      }
+
+      resources {
+        cpu    = 100
+        memory = 128
+      }
+
+      service {
+        name = "devops-dash"
+        port = "http"
+
+        tags = [
+          "traefik.enable=true",
+          "traefik.http.routers.devops-dash.rule=Host(`dash.i80.dk`)",
+          "traefik.http.routers.devops-dash.entrypoints=websecure",
+          "traefik.http.routers.devops-dash.tls=true",
+          "traefik.http.routers.devops-dash.tls.certresolver=letsencrypt",
+        ]
+
+        check {
+          type     = "http"
+          path     = "/health"
+          interval = "15s"
+          timeout  = "3s"
+        }
+      }
+    }
+  }
+}