- k8s manifests: Deployment, Service, PVC, Ingress, ExternalSecret - Argo CD app watching servers/legion/k8s/docuseal - CF tunnel ingress rule for sign.neuralplatform.ai - Vault secret at secret/docuseal (secret_key_base seeded)