servers/psmf: add psmf server docs, nginx/tailscale config, and data-sync

Document the psmf host (DNS, second tailscale netns instance, nginx
vhosts, migration plan) and add the docker-dev-22 psmf-data-sync
service plus the storage-23 pg_hba.conf entry it needs.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

vms/docker-dev-22/psmf-data-sync/.env

@@ -0,0 +1,20 @@
+# Image (built by .gitea/workflows/build.yaml)
+# IMAGE_REPO is the Gitea repo path, e.g. "jan/psmf-data-sync"
+IMAGE_REPO=gitea.home.hrajfrisbee.cz/psmf/psmf-data-syncer
+IMAGE_TAG=0.2
+
+# Host port to publish the syncer on (container listens on 8002 internally)
+HOST_PORT=8003
+
+# External Postgres the syncer restores into
+DB_HOST=192.168.123.23
+DB_PORT=5432
+DB_NAME=psmf-dev
+DB_USER=psmf-dev
+DB_PASSWORD=** masked even when it is so secret **
+
+# Which Redis DB index to use (0-15)
+REDIS_DB=0
+
+# info | debug
+LOG_LEVEL=debug

vms/docker-dev-22/psmf-data-sync/docker-compose.yml

@@ -0,0 +1,28 @@
+services:
+  redis:
+    image: redis:7-alpine
+    restart: unless-stopped
+    command: ["redis-server", "--appendonly", "yes"]
+    volumes:
+      - redis-data:/data
+
+  psmf-data-sync:
+    image: ${IMAGE_REPO}:${IMAGE_TAG:-latest}
+    restart: unless-stopped
+    depends_on:
+      - redis
+    ports:
+      - "${HOST_PORT:-8003}:8002"
+    environment:
+      DB_HOST: ${DB_HOST}
+      DB_PORT: ${DB_PORT:-5432}
+      DB_NAME: ${DB_NAME}
+      DB_USER: ${DB_USER}
+      DB_PASSWORD: ${DB_PASSWORD}
+      REDIS_HOST: redis
+      REDIS_PORT: 6379
+      REDIS_DB: ${REDIS_DB:-0}
+      LOG_LEVEL: ${LOG_LEVEL:-info}
+
+volumes:
+  redis-data:

vms/docker-dev-22/readme.md

@@ -0,0 +1,22 @@
+## docker
+
+```bash
+# prereqs + keyring
+sudo apt-get update
+sudo apt-get install -y ca-certificates curl
+sudo install -m 0755 -d /etc/apt/keyrings
+sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc
+sudo chmod a+r /etc/apt/keyrings/docker.asc
+
+# repo
+echo \
+  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/ubuntu \
+  $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | \
+  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
+
+# install
+sudo apt-get update
+sudo apt-get install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
+
+
+```