# Layout

| Path                       | Contents                                        |
| -------------------------- | ----------------------------------------------- |
| `/mnt/nas/stacks/<stack>`  | Git working tree for a stack repo.              |
| `/mnt/nas/data/<stack>`    | Runtime state and bind-mounted data.            |
| `/mnt/nas/media`           | Bulk media.                                     |
| `/mnt/nas/ca`              | CA roots, SSH CA pubkey, managed cert material. |
| `/mnt/nas/ldap-certs`      | LDAP cert material.                             |
| `/var/lib/charlie/<stack>` | Host-local state or textfile metrics.           |
| `/etc/charlie/age.key`     | Host SOPS age private key.                      |

| Naming          | Rule                      |
| --------------- | ------------------------- |
| Stack repo      | `Charlie/<stack>`         |
| Stack path      | `/mnt/nas/stacks/<stack>` |
| Data path       | `/mnt/nas/data/<stack>`   |
| Directory style | lowercase kebab-case      |

Runtime state belongs in `/mnt/nas/data` or host-local `/var/lib/charlie`, not
in stack repos.