wiki(concepts): ingest ocis-on-vds-deploy-recipe + entity refresh

New concept page documents the oCIS-on-VDS deploy pattern with the 4
non-obvious gotchas surfaced during owncloud-vds-deploy:

  1. UID mismatch — image ocis-user is 1000, host vitya is 1001 →
     compose `user: "1001:1001"` override (alt chown rejected as orphan-UID)
  2. PROXY_TLS=false — explicit per docs when reverse proxy terminates HTTPS
  3. PROXY_ENABLE_BASIC_AUTH=true — required for WebDAV/LibreGraph API
  4. LibreGraph POST /graph/v1.0/users — only way to create users (no CLI)

Plus decomposedfs storage layout, atomic-revert recipe, backup integration
note. Source: .tasks/owncloud-vds-deploy.md.

entities/vds-kzntsv.md updated: stack table + hostnames + file layout
include owncloud row.

index.md catalog + log.md ingest entry refreshed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

.wiki/entities/vds-kzntsv.md

@@ -1,9 +1,9 @@
 ---
 title: VDS kzntsv — Rusonyx 160 NVMe cloud server
 type: entity
-tags: [hardware, vds, cloud, rusonyx, infrastructure, gitea, verdaccio, registry, postgres, mariadb, mongo, redis]
+tags: [hardware, vds, cloud, rusonyx, infrastructure, gitea, verdaccio, registry, postgres, mariadb, mongo, redis, owncloud, ocis]
 sources: [../sources/vds-kzntsv-bootstrap-2026-05-20.md]
-updated: 2026-05-20
+updated: 2026-05-21
 ---
 
 # VDS kzntsv
@@ -51,6 +51,7 @@ Production CMS (MoreThenCms) **остаётся на** [`windows-recovery-host`]
 | Git | gitea | 1.25.5 | `/opt/stacks/gitea/` |
 | NPM | verdaccio | 6 | `/opt/stacks/verdaccio/` |
 | Docker registry | registry | 2.8.3 + joxit UI | `/opt/stacks/registry/` |
+| Personal cloud | ownCloud Infinite Scale (oCIS) | 7.1.0 | `/opt/stacks/owncloud/` |
 
 ## Docker networks (external)
 
@@ -67,6 +68,7 @@ Production CMS (MoreThenCms) **остаётся на** [`windows-recovery-host`]
 | `verdaccio.kzntsv.site` | Verdaccio | kreknin htpasswd (vitya) | Private npm |
 | `registry.kzntsv.site` | Docker Registry | vitya / Pryakhin9 (htpasswd) | Docker images |
 | `registry-ui.vds.kzntsv.site` | Joxit Registry UI | (proxied к registry, та же auth) | GUI cleanup |
+| `owncloud.kzntsv.site` | oCIS (ownCloud Infinite Scale) | admin + vitya (pass `owncloud/*`); basic auth enabled для WebDAV/LibreGraph | Personal cloud, replace мёртвой Synology ownCloud (см. [`ocis-on-vds-deploy-recipe`](../concepts/ocis-on-vds-deploy-recipe.md)) |
 | `postgres.vds.kzntsv.site:5432` | Postgres TLS | postgres / hex32 | Shared DB |
 | `mariadb.vds.kzntsv.site:3306` | MariaDB TLS | root / hex32 | Shared DB |
 | `mongo.vds.kzntsv.site:27017` | MongoDB TLS | root / hex32 | Shared DB |
@@ -102,10 +104,15 @@ DB TLS: self-signed certs (CN matches hostname), клиент с `verify-none` /
 │   ├── config/{config.yaml,htpasswd}
 │   ├── plugins/
 │   └── docker-compose.yml
-└── registry/
-    ├── docker/                 (registry blobs storage)
-    ├── auth/htpasswd
-    └── docker-compose.yml      (registry + registry-ui в одном compose)
+├── registry/
+│   ├── docker/                 (registry blobs storage)
+│   ├── auth/htpasswd
+│   └── docker-compose.yml      (registry + registry-ui в одном compose)
+└── owncloud/
+    ├── data/                   (decomposedfs: idm/, idp/, nats/, search/, storage/{metadata,users}/spaces/...)
+    ├── config/                 (ocis.yaml generated by `ocis init`)
+    ├── .env                    (chmod 600 — OCIS_ADMIN_PASSWORD)
+    └── docker-compose.yml      (oCIS 7.1.0 + traefik labels — recipe: [`ocis-on-vds-deploy-recipe`](../concepts/ocis-on-vds-deploy-recipe.md))
 ```
 
 ## Что входит в backup pipeline (planned)