Standardize NOMAD host-run service paths

docs/operations/STACK_STANDARDS.md

@@ -19,6 +19,16 @@ Each stack contains:
 - `.env.example` — committed with placeholder values
 - optional init scripts (e.g. `initdb/`, `initdb-mariadb/`)
 
+## Host-Run Services
+If something on NOMAD is not deployed as a Docker compose stack, its live runtime belongs under `/opt/<service>`.
+
+Examples:
+- `/opt/project-nomad`
+- `/opt/newt`
+- `/opt/doris-dashboard`
+
+Use the repo for source/staging, but do not run production host services from an agent workspace or random checkout under `/home/fizzlepoof/.openclaw/workspace`.
+
 ## Deployment Order
 1. `databases/` — must be up before anything else
 2. `infrastructure/` — newt creates the pangolin network

docs/servers/NOMAD.md

@@ -185,10 +185,11 @@ These are expected to be managed by Wings/Pelican rather than a local compose fi
 - Project N.O.M.A.D.-managed app containers stay exactly as-is and are **hands-off** unless John explicitly says otherwise.
 - `whisper` and `node-exporter` are not protected services; they can be removed, but their exact runtime has been documented above for rebuild/recovery.
 - Pelican/Wings-managed game containers are part of the permanent game-server stack on NOMAD and stay in place.
-- Doris Dashboard source now lives in the canonical homelab repo at `/home/fizzlepoof/.openclaw/workspace/sgt_angel/truenas-stacks/home/doris-dashboard` rather than the old workspace-only repo.
+- Doris Dashboard source belongs in the homelab repo, and the live NOMAD runtime belongs at `/opt/doris-dashboard`.
 
 ### Doris Dashboard (local NOMAD homepage)
-- Canonical repo path: `/home/fizzlepoof/.openclaw/workspace/sgt_angel/truenas-stacks/home/doris-dashboard`
+- Live runtime path: `/opt/doris-dashboard`
+- Repo source path: `/home/fizzlepoof/repos/truenas-stacks/home/doris-dashboard`
 - Purpose: local-only dashboard for briefing/news/weather/homelab pulse/Paperless review on NOMAD
 - Generator: `home/doris-dashboard/bin/generate_dashboard.py`
 - Interactive LAN server: `home/doris-dashboard/bin/dashboard_server.py`
@@ -196,7 +197,12 @@ These are expected to be managed by Wings/Pelican rather than a local compose fi
 - Runtime notes:
   - Generated output and queue snapshots are runtime data; source/config lives in git, generated JSON/HTML does not need to be treated as canonical.
   - Topic thumbs write back to `doris-digest/data/feedback.json`.
-  - Paperless acknowledge/dismiss state writes to `home/doris-dashboard/data/paperless_review_state.json` on the local checkout.
+  - Paperless acknowledge/dismiss state writes to `/opt/doris-dashboard/data/paperless_review_state.json` on the live host.
+
+### Host-run service path rule
+- Docker/compose-managed stacks live under `/mnt/docker-ssd/docker/compose`.
+- Host-run services that are not compose stacks live under `/opt/<service>`.
+- Do not run production services from any agent workspace or ad-hoc checkout under `/home/fizzlepoof/.openclaw/workspace`.
 
 ### Safe to remove / how to restore
 #### Safe to remove now