infra: deploy Rongorongo decipherment engine to hf-pdocker-01

Standalone Compose service running a locally-built nginx image that
serves a static Anthropic-API frontend. Traefik dynamic route added
for public HTTPS access. Blackbox probe added to prometheus.yml for
uptime monitoring. CLAUDE.md updated with service entry.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

stacks/monitoring/prometheus.yml

@@ -57,7 +57,6 @@ scrape_configs:
         - http://192.168.86.192:5000        # Frigate NVR (standalone, host network)
         - http://192.168.86.192:5199/health  # Frigate Notify
         - http://192.168.86.192:5200/health  # clip-service (CLIP embeddings)
-        - http://192.168.86.192:3010        # Open WebUI
         - http://192.168.86.192:8888/health  # Farm Manager API
         - http://192.168.86.192:8889/health  # Farm Agent
         - http://192.168.86.192:8123        # Home Assistant
@@ -69,8 +68,9 @@ scrape_configs:
         - http://192.168.86.192:3001        # Grafana
         - http://192.168.86.192:9095        # Prometheus
         - http://192.168.86.192:9093        # Alertmanager
-        - http://192.168.86.192:18815       # Travis (NemoClaw agent)
         - http://192.168.86.192:18795       # Spirit (infra ops agent)
+        - http://192.168.86.192:8085        # VoiceCoach web client
+        - http://192.168.86.192:7880        # VoiceCoach LiveKit server
     relabel_configs:
       - source_labels: [__address__]
         target_label: __param_target
@@ -93,9 +93,6 @@ scrape_configs:
         - http://192.168.86.100:5006        # Actual Budget
         - http://192.168.86.100:8001/openapi.json  # MCPO
         - http://192.168.86.100:8889/health  # Farm Agent
-        - http://192.168.86.100:8888        # SearXNG
-        - http://192.168.86.100:8000/healthcheck  # Unstructured API
-        - http://192.168.86.100:9000        # Portainer
     relabel_configs:
       - source_labels: [__address__]
         target_label: __param_target
@@ -135,10 +132,6 @@ scrape_configs:
         - http://192.168.86.167:5055        # Jellyseerr
         - http://192.168.86.167:9392        # OpenVAS
         - http://192.168.86.167:8889/health  # Farm Agent
-      - targets:
-        - http://192.168.86.167:3005        # Onyx
-        labels:
-          name: onyx
     relabel_configs:
       - source_labels: [__address__]
         target_label: __param_target
@@ -159,7 +152,8 @@ scrape_configs:
         - https://yoda.hobbs.farm          # Home Assistant
         - https://vault.hobbs.farm         # Vaultwarden
         - https://git.hobbs.farm           # Gitea
-        - https://open.hobbs.farm          # Open WebUI
+        - https://coach.hobbs.farm         # VoiceCoach web client
+        - https://rongorongo.hobbs.farm    # Rongorongo decipherment engine
     relabel_configs:
       - source_labels: [__address__]
         target_label: __param_target

stacks/traefik/dynamic/rongorongo.yml

@@ -0,0 +1,28 @@
+http:
+  routers:
+    rongorongo:
+      rule: "Host(`rongorongo.hobbs.farm`)"
+      entryPoints:
+        - websecure
+      middlewares:
+        - security-headers
+      service: rongorongo
+      tls:
+        certResolver: letsencrypt
+    rongorongo-http:
+      rule: "Host(`rongorongo.hobbs.farm`)"
+      entryPoints:
+        - web
+      middlewares:
+        - rongorongo-https-redirect
+      service: rongorongo
+  middlewares:
+    rongorongo-https-redirect:
+      redirectScheme:
+        scheme: https
+        permanent: true
+  services:
+    rongorongo:
+      loadBalancer:
+        servers:
+          - url: "http://192.168.86.192:8181"