devops folders consolidate

2026-01-25 23:27:41 +02:00
parent 6e687b523a
commit a743bb9a1d
613 changed files with 8611 additions and 41846 deletions
--- a/devops/helm/stellaops/values-airgap.yaml
+++ b/devops/helm/stellaops/values-airgap.yaml
@@ -53,9 +53,8 @@ configMaps:
    data:
      notify.yaml: |
        storage:
-          driver: mongo
-          connectionString: "mongodb://notify-mongo.prod.svc.cluster.local:27017"
-          database: "stellaops_notify"
+          driver: postgres
+          connectionString: "Host=stellaops-postgres;Port=5432;Database=notify;Username=stellaops;Password=stellaops"
          commandTimeoutSeconds: 60

        authority:
@@ -104,7 +103,9 @@ services:
      port: 8440
    env:
      STELLAOPS_AUTHORITY__ISSUER: "https://stellaops-authority:8440"
-      STELLAOPS_AUTHORITY__MONGO__CONNECTIONSTRING: "mongodb://stellaops-airgap:stellaops-airgap@stellaops-mongo:27017"
+      STELLAOPS_AUTHORITY__STORAGE__DRIVER: "postgres"
+      STELLAOPS_AUTHORITY__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=authority;Username=stellaops;Password=stellaops"
+      STELLAOPS_AUTHORITY__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
      STELLAOPS_AUTHORITY__ALLOWANONYMOUSFALLBACK: "false"
  signer:
    image: registry.stella-ops.org/stellaops/signer@sha256:ddbbd664a42846cea6b40fca6465bc679b30f72851158f300d01a8571c5478fc
@@ -113,23 +114,27 @@ services:
    env:
      SIGNER__AUTHORITY__BASEURL: "https://stellaops-authority:8440"
      SIGNER__POE__INTROSPECTURL: "file:///offline/poe/introspect.json"
-      SIGNER__STORAGE__MONGO__CONNECTIONSTRING: "mongodb://stellaops-airgap:stellaops-airgap@stellaops-mongo:27017"
+      SIGNER__STORAGE__DRIVER: "postgres"
+      SIGNER__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=signer;Username=stellaops;Password=stellaops"
+      SIGNER__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
  attestor:
    image: registry.stella-ops.org/stellaops/attestor@sha256:1ff0a3124d66d3a2702d8e421df40fbd98cc75cb605d95510598ebbae1433c50
    service:
      port: 8442
    env:
      ATTESTOR__SIGNER__BASEURL: "https://stellaops-signer:8441"
-      ATTESTOR__MONGO__CONNECTIONSTRING: "mongodb://stellaops-airgap:stellaops-airgap@stellaops-mongo:27017"
+      ATTESTOR__STORAGE__DRIVER: "postgres"
+      ATTESTOR__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=attestor;Username=stellaops;Password=stellaops"
+      ATTESTOR__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
  concelier:
    image: registry.stella-ops.org/stellaops/concelier@sha256:29e2e1a0972707e092cbd3d370701341f9fec2aa9316fb5d8100480f2a1c76b5
    service:
      port: 8445
    env:
-      CONCELIER__STORAGE__MONGO__CONNECTIONSTRING: "mongodb://stellaops-airgap:stellaops-airgap@stellaops-mongo:27017"
-      CONCELIER__STORAGE__S3__ENDPOINT: "http://stellaops-minio:9000"
-      CONCELIER__STORAGE__S3__ACCESSKEYID: "stellaops-airgap"
-      CONCELIER__STORAGE__S3__SECRETACCESSKEY: "airgap-minio-secret"
+      CONCELIER__STORAGE__DRIVER: "postgres"
+      CONCELIER__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=concelier;Username=stellaops;Password=stellaops"
+      CONCELIER__STORAGE__S3__ENDPOINT: "http://stellaops-rustfs:8080"
+      CONCELIER__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
      CONCELIER__AUTHORITY__BASEURL: "https://stellaops-authority:8440"
      CONCELIER__AUTHORITY__RESILIENCE__ALLOWOFFLINECACHEFALLBACK: "true"
      CONCELIER__AUTHORITY__RESILIENCE__OFFLINECACHETOLERANCE: "00:45:00"
@@ -144,16 +149,17 @@ services:
    service:
      port: 8444
    env:
-      SCANNER__STORAGE__MONGO__CONNECTIONSTRING: "mongodb://stellaops-airgap:stellaops-airgap@stellaops-mongo:27017"
+      SCANNER__STORAGE__DRIVER: "postgres"
+      SCANNER__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=scanner;Username=stellaops;Password=stellaops"
+      SCANNER__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
      SCANNER__ARTIFACTSTORE__DRIVER: "rustfs"
      SCANNER__ARTIFACTSTORE__ENDPOINT: "http://stellaops-rustfs:8080/api/v1"
      SCANNER__ARTIFACTSTORE__BUCKET: "scanner-artifacts"
      SCANNER__ARTIFACTSTORE__TIMEOUTSECONDS: "30"
-      SCANNER__QUEUE__BROKER: "nats://stellaops-nats:4222"
+      SCANNER__QUEUE__BROKER: "valkey://stellaops-valkey:6379"
      SCANNER__EVENTS__ENABLED: "false"
-      # Valkey (Redis-compatible) cache driver; keep "redis" for protocol compatibility.
-      SCANNER__EVENTS__DRIVER: "redis"
-      SCANNER__EVENTS__DSN: ""
+      SCANNER__EVENTS__DRIVER: "valkey"
+      SCANNER__EVENTS__DSN: "stellaops-valkey:6379"
      SCANNER__EVENTS__STREAM: "stella.events"
      SCANNER__EVENTS__PUBLISHTIMEOUTSECONDS: "5"
      SCANNER__EVENTS__MAXSTREAMLENGTH: "10000"
@@ -169,16 +175,17 @@ services:
  scanner-worker:
    image: registry.stella-ops.org/stellaops/scanner-worker@sha256:eea5d6cfe7835950c5ec7a735a651f2f0d727d3e470cf9027a4a402ea89c4fb5
    env:
-      SCANNER__STORAGE__MONGO__CONNECTIONSTRING: "mongodb://stellaops-airgap:stellaops-airgap@stellaops-mongo:27017"
+      SCANNER__STORAGE__DRIVER: "postgres"
+      SCANNER__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=scanner;Username=stellaops;Password=stellaops"
+      SCANNER__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
      SCANNER__ARTIFACTSTORE__DRIVER: "rustfs"
      SCANNER__ARTIFACTSTORE__ENDPOINT: "http://stellaops-rustfs:8080/api/v1"
      SCANNER__ARTIFACTSTORE__BUCKET: "scanner-artifacts"
      SCANNER__ARTIFACTSTORE__TIMEOUTSECONDS: "30"
-      SCANNER__QUEUE__BROKER: "nats://stellaops-nats:4222"
+      SCANNER__QUEUE__BROKER: "valkey://stellaops-valkey:6379"
      SCANNER__EVENTS__ENABLED: "false"
-      # Valkey (Redis-compatible) cache driver; keep "redis" for protocol compatibility.
-      SCANNER__EVENTS__DRIVER: "redis"
-      SCANNER__EVENTS__DSN: ""
+      SCANNER__EVENTS__DRIVER: "valkey"
+      SCANNER__EVENTS__DSN: "stellaops-valkey:6379"
      SCANNER__EVENTS__STREAM: "stella.events"
      SCANNER__EVENTS__PUBLISHTIMEOUTSECONDS: "5"
      SCANNER__EVENTS__MAXSTREAMLENGTH: "10000"
@@ -203,6 +210,8 @@ services:
      port: 8446
    env:
      DOTNET_ENVIRONMENT: Production
+      NOTIFY__QUEUE__DRIVER: "valkey"
+      NOTIFY__QUEUE__VALKEY__URL: "stellaops-valkey:6379"
    configMounts:
      - name: notify-config
        mountPath: /app/etc/notify.yaml
@@ -212,7 +221,8 @@ services:
    image: registry.stella-ops.org/stellaops/excititor@sha256:65c0ee13f773efe920d7181512349a09d363ab3f3e177d276136bd2742325a68
    env:
      EXCITITOR__CONCELIER__BASEURL: "https://stellaops-concelier:8445"
-      EXCITITOR__STORAGE__MONGO__CONNECTIONSTRING: "mongodb://stellaops-airgap:stellaops-airgap@stellaops-mongo:27017"
+      EXCITITOR__STORAGE__DRIVER: "postgres"
+      EXCITITOR__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=excititor;Username=stellaops;Password=stellaops"
  advisory-ai-web:
    image: registry.stella-ops.org/stellaops/advisory-ai-web:2025.09.2-airgap
    service:
@@ -254,42 +264,38 @@ services:
      targetPort: 8443
    env:
      STELLAOPS_UI__BACKEND__BASEURL: "https://stellaops-scanner-web:8444"
-  mongo:
+
+  # Infrastructure services
+  postgres:
    class: infrastructure
-    image: docker.io/library/mongo@sha256:c258b26dbb7774f97f52aff52231ca5f228273a84329c5f5e451c3739457db49
+    image: docker.io/library/postgres@sha256:8e97b8526ed19304b144f7478bc9201646acf0723cdc6e4b19bc9eb34879a27e
    service:
-      port: 27017
-    command:
-      - mongod
-      - --bind_ip_all
+      port: 5432
    env:
-      MONGO_INITDB_ROOT_USERNAME: stellaops-airgap
-      MONGO_INITDB_ROOT_PASSWORD: stellaops-airgap
+      POSTGRES_USER: stellaops
+      POSTGRES_PASSWORD: stellaops
+      POSTGRES_DB: stellaops
    volumeMounts:
-      - name: mongo-data
-        mountPath: /data/db
+      - name: postgres-data
+        mountPath: /var/lib/postgresql/data
    volumeClaims:
-      - name: mongo-data
-        claimName: stellaops-mongo-data
-  minio:
+      - name: postgres-data
+        claimName: stellaops-postgres-data
+  valkey:
    class: infrastructure
-    image: docker.io/minio/minio@sha256:14cea493d9a34af32f524e538b8346cf79f3321eff8e708c1e2960462bd8936e
+    image: docker.io/valkey/valkey:9.0.1-alpine
    service:
-      port: 9000
+      port: 6379
    command:
-      - server
-      - /data
-      - --console-address
-      - :9001
-    env:
-      MINIO_ROOT_USER: stellaops-airgap
-      MINIO_ROOT_PASSWORD: airgap-minio-secret
+      - valkey-server
+      - --appendonly
+      - "yes"
    volumeMounts:
-      - name: minio-data
+      - name: valkey-data
        mountPath: /data
    volumeClaims:
-      - name: minio-data
-        claimName: stellaops-minio-data
+      - name: valkey-data
+        claimName: stellaops-valkey-data
  rustfs:
    class: infrastructure
    image: registry.stella-ops.org/stellaops/rustfs:2025.09.2
@@ -310,19 +316,3 @@ services:
    volumeClaims:
      - name: rustfs-data
        claimName: stellaops-rustfs-data
-  nats:
-    class: infrastructure
-    image: docker.io/library/nats@sha256:c82559e4476289481a8a5196e675ebfe67eea81d95e5161e3e78eccfe766608e
-    service:
-      port: 4222
-    command:
-      - -js
-      - -sd
-      - /data
-    volumeMounts:
-      - name: nats-data
-        mountPath: /data
-    volumeClaims:
-      - name: nats-data
-        claimName: stellaops-nats-data
-
--- a/devops/helm/stellaops/values-dev.yaml
+++ b/devops/helm/stellaops/values-dev.yaml
@@ -21,9 +21,8 @@ configMaps:
    data:
      notify.yaml: |
        storage:
-          driver: mongo
-          connectionString: "mongodb://notify-mongo.dev.svc.cluster.local:27017"
-          database: "stellaops_notify_dev"
+          driver: postgres
+          connectionString: "Host=stellaops-postgres;Port=5432;Database=notify;Username=stellaops;Password=stellaops"
          commandTimeoutSeconds: 30

        authority:
@@ -63,6 +62,7 @@ configMaps:
      STELLAOPS_POLICY_ENGINE__ACTIVATION__FORCETWOPERSONAPPROVAL: "false"
      STELLAOPS_POLICY_ENGINE__ACTIVATION__DEFAULTREQUIRESTWOPERSONAPPROVAL: "false"
      STELLAOPS_POLICY_ENGINE__ACTIVATION__EMITAUDITLOGS: "true"
+
 services:
  authority:
    image: registry.stella-ops.org/stellaops/authority@sha256:a8e8faec44a579aa5714e58be835f25575710430b1ad2ccd1282a018cd9ffcdd
@@ -70,7 +70,9 @@ services:
      port: 8440
    env:
      STELLAOPS_AUTHORITY__ISSUER: "https://stellaops-authority:8440"
-      STELLAOPS_AUTHORITY__MONGO__CONNECTIONSTRING: "mongodb://stellaops:stellaops@stellaops-mongo:27017"
+      STELLAOPS_AUTHORITY__STORAGE__DRIVER: "postgres"
+      STELLAOPS_AUTHORITY__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=authority;Username=stellaops;Password=stellaops"
+      STELLAOPS_AUTHORITY__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
      STELLAOPS_AUTHORITY__PLUGINDIRECTORIES__0: "/app/plugins"
      STELLAOPS_AUTHORITY__PLUGINS__CONFIGURATIONDIRECTORY: "/app/etc/authority.plugins"
  signer:
@@ -80,23 +82,27 @@ services:
    env:
      SIGNER__AUTHORITY__BASEURL: "https://stellaops-authority:8440"
      SIGNER__POE__INTROSPECTURL: "https://licensing.svc.local/introspect"
-      SIGNER__STORAGE__MONGO__CONNECTIONSTRING: "mongodb://stellaops:stellaops@stellaops-mongo:27017"
+      SIGNER__STORAGE__DRIVER: "postgres"
+      SIGNER__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=signer;Username=stellaops;Password=stellaops"
+      SIGNER__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
  attestor:
    image: registry.stella-ops.org/stellaops/attestor@sha256:5cc417948c029da01dccf36e4645d961a3f6d8de7e62fe98d845f07cd2282114
    service:
      port: 8442
    env:
      ATTESTOR__SIGNER__BASEURL: "https://stellaops-signer:8441"
-      ATTESTOR__MONGO__CONNECTIONSTRING: "mongodb://stellaops:stellaops@stellaops-mongo:27017"
+      ATTESTOR__STORAGE__DRIVER: "postgres"
+      ATTESTOR__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=attestor;Username=stellaops;Password=stellaops"
+      ATTESTOR__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
  concelier:
    image: registry.stella-ops.org/stellaops/concelier@sha256:dafef3954eb4b837e2c424dd2d23e1e4d60fa83794840fac9cd3dea1d43bd085
    service:
      port: 8445
    env:
-      CONCELIER__STORAGE__MONGO__CONNECTIONSTRING: "mongodb://stellaops:stellaops@stellaops-mongo:27017"
-      CONCELIER__STORAGE__S3__ENDPOINT: "http://stellaops-minio:9000"
-      CONCELIER__STORAGE__S3__ACCESSKEYID: "stellaops"
-      CONCELIER__STORAGE__S3__SECRETACCESSKEY: "dev-minio-secret"
+      CONCELIER__STORAGE__DRIVER: "postgres"
+      CONCELIER__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=concelier;Username=stellaops;Password=stellaops"
+      CONCELIER__STORAGE__S3__ENDPOINT: "http://stellaops-rustfs:8080"
+      CONCELIER__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
      CONCELIER__AUTHORITY__BASEURL: "https://stellaops-authority:8440"
    volumeMounts:
      - name: concelier-jobs
@@ -109,16 +115,17 @@ services:
    service:
      port: 8444
    env:
-      SCANNER__STORAGE__MONGO__CONNECTIONSTRING: "mongodb://stellaops:stellaops@stellaops-mongo:27017"
+      SCANNER__STORAGE__DRIVER: "postgres"
+      SCANNER__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=scanner;Username=stellaops;Password=stellaops"
+      SCANNER__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
      SCANNER__ARTIFACTSTORE__DRIVER: "rustfs"
      SCANNER__ARTIFACTSTORE__ENDPOINT: "http://stellaops-rustfs:8080/api/v1"
      SCANNER__ARTIFACTSTORE__BUCKET: "scanner-artifacts"
      SCANNER__ARTIFACTSTORE__TIMEOUTSECONDS: "30"
-      SCANNER__QUEUE__BROKER: "nats://stellaops-nats:4222"
+      SCANNER__QUEUE__BROKER: "valkey://stellaops-valkey:6379"
      SCANNER__EVENTS__ENABLED: "false"
-      # Valkey (Redis-compatible) cache driver; keep "redis" for protocol compatibility.
-      SCANNER__EVENTS__DRIVER: "redis"
-      SCANNER__EVENTS__DSN: ""
+      SCANNER__EVENTS__DRIVER: "valkey"
+      SCANNER__EVENTS__DSN: "stellaops-valkey:6379"
      SCANNER__EVENTS__STREAM: "stella.events"
      SCANNER__EVENTS__PUBLISHTIMEOUTSECONDS: "5"
      SCANNER__EVENTS__MAXSTREAMLENGTH: "10000"
@@ -134,16 +141,17 @@ services:
  scanner-worker:
    image: registry.stella-ops.org/stellaops/scanner-worker@sha256:92dda42f6f64b2d9522104a5c9ffb61d37b34dd193132b68457a259748008f37
    env:
-      SCANNER__STORAGE__MONGO__CONNECTIONSTRING: "mongodb://stellaops:stellaops@stellaops-mongo:27017"
+      SCANNER__STORAGE__DRIVER: "postgres"
+      SCANNER__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=scanner;Username=stellaops;Password=stellaops"
+      SCANNER__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
      SCANNER__ARTIFACTSTORE__DRIVER: "rustfs"
      SCANNER__ARTIFACTSTORE__ENDPOINT: "http://stellaops-rustfs:8080/api/v1"
      SCANNER__ARTIFACTSTORE__BUCKET: "scanner-artifacts"
      SCANNER__ARTIFACTSTORE__TIMEOUTSECONDS: "30"
-      SCANNER__QUEUE__BROKER: "nats://stellaops-nats:4222"
+      SCANNER__QUEUE__BROKER: "valkey://stellaops-valkey:6379"
      SCANNER__EVENTS__ENABLED: "false"
-      # Valkey (Redis-compatible) cache driver; keep "redis" for protocol compatibility.
-      SCANNER__EVENTS__DRIVER: "redis"
-      SCANNER__EVENTS__DSN: ""
+      SCANNER__EVENTS__DRIVER: "valkey"
+      SCANNER__EVENTS__DSN: "stellaops-valkey:6379"
      SCANNER__EVENTS__STREAM: "stella.events"
      SCANNER__EVENTS__PUBLISHTIMEOUTSECONDS: "5"
      SCANNER__EVENTS__MAXSTREAMLENGTH: "10000"
@@ -157,6 +165,8 @@ services:
      port: 8446
    env:
      DOTNET_ENVIRONMENT: Development
+      NOTIFY__QUEUE__DRIVER: "valkey"
+      NOTIFY__QUEUE__VALKEY__URL: "stellaops-valkey:6379"
    configMounts:
      - name: notify-config
        mountPath: /app/etc/notify.yaml
@@ -166,7 +176,8 @@ services:
    image: registry.stella-ops.org/stellaops/excititor@sha256:d9bd5cadf1eab427447ce3df7302c30ded837239771cc6433b9befb895054285
    env:
      EXCITITOR__CONCELIER__BASEURL: "https://stellaops-concelier:8445"
-      EXCITITOR__STORAGE__MONGO__CONNECTIONSTRING: "mongodb://stellaops:stellaops@stellaops-mongo:27017"
+      EXCITITOR__STORAGE__DRIVER: "postgres"
+      EXCITITOR__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=excititor;Username=stellaops;Password=stellaops"
  advisory-ai-web:
    image: registry.stella-ops.org/stellaops/advisory-ai-web:2025.10.0-edge
    service:
@@ -207,41 +218,37 @@ services:
      port: 8443
    env:
      STELLAOPS_UI__BACKEND__BASEURL: "https://stellaops-scanner-web:8444"
-  mongo:
+
+  # Infrastructure services
+  postgres:
    class: infrastructure
-    image: docker.io/library/mongo@sha256:c258b26dbb7774f97f52aff52231ca5f228273a84329c5f5e451c3739457db49
+    image: docker.io/library/postgres@sha256:8e97b8526ed19304b144f7478bc9201646acf0723cdc6e4b19bc9eb34879a27e
    service:
-      port: 27017
-    command:
-      - mongod
-      - --bind_ip_all
+      port: 5432
    env:
-      MONGO_INITDB_ROOT_USERNAME: stellaops
-      MONGO_INITDB_ROOT_PASSWORD: stellaops
+      POSTGRES_USER: stellaops
+      POSTGRES_PASSWORD: stellaops
+      POSTGRES_DB: stellaops
    volumeMounts:
-      - name: mongo-data
-        mountPath: /data/db
+      - name: postgres-data
+        mountPath: /var/lib/postgresql/data
    volumes:
-      - name: mongo-data
+      - name: postgres-data
        emptyDir: {}
-  minio:
+  valkey:
    class: infrastructure
-    image: docker.io/minio/minio@sha256:14cea493d9a34af32f524e538b8346cf79f3321eff8e708c1e2960462bd8936e
+    image: docker.io/valkey/valkey:9.0.1-alpine
    service:
-      port: 9000
+      port: 6379
    command:
-      - server
-      - /data
-      - --console-address
-      - :9001
-    env:
-      MINIO_ROOT_USER: stellaops
-      MINIO_ROOT_PASSWORD: dev-minio-secret
+      - valkey-server
+      - --appendonly
+      - "yes"
    volumeMounts:
-      - name: minio-data
+      - name: valkey-data
        mountPath: /data
    volumes:
-      - name: minio-data
+      - name: valkey-data
        emptyDir: {}
  rustfs:
    class: infrastructure
@@ -257,19 +264,3 @@ services:
    volumes:
      - name: rustfs-data
        emptyDir: {}
-  nats:
-    class: infrastructure
-    image: docker.io/library/nats@sha256:c82559e4476289481a8a5196e675ebfe67eea81d95e5161e3e78eccfe766608e
-    service:
-      port: 4222
-    command:
-      - -js
-      - -sd
-      - /data
-    volumeMounts:
-      - name: nats-data
-        mountPath: /data
-    volumes:
-      - name: nats-data
-        emptyDir: {}
-
--- a/devops/helm/stellaops/values-export.yaml
+++ b/devops/helm/stellaops/values-export.yaml
@@ -3,10 +3,10 @@ exportcenter:
    repository: registry.stella-ops.org/export-center
    tag: latest
  objectStorage:
-    endpoint: http://minio:9000
+    endpoint: http://rustfs:8080
    bucket: export-prod
-    accessKeySecret: exportcenter-minio
-    secretKeySecret: exportcenter-minio
+    accessKeySecret: exportcenter-rustfs
+    secretKeySecret: exportcenter-rustfs
  signing:
    kmsKey: exportcenter-kms
    kmsRegion: us-east-1
--- a/devops/helm/stellaops/values-mirror.yaml
+++ b/devops/helm/stellaops/values-mirror.yaml
@@ -106,28 +106,28 @@ configMaps:
            proxy_cache off;
        }

-        location / {
-            return 404;
-        }
-
-
-  policy-engine-activation:
-    data:
-      STELLAOPS_POLICY_ENGINE__ACTIVATION__FORCETWOPERSONAPPROVAL: "true"
-      STELLAOPS_POLICY_ENGINE__ACTIVATION__DEFAULTREQUIRESTWOPERSONAPPROVAL: "true"
-      STELLAOPS_POLICY_ENGINE__ACTIVATION__EMITAUDITLOGS: "true"
-
-services:
+        location / {
+            return 404;
+        }
+
+
+  policy-engine-activation:
+    data:
+      STELLAOPS_POLICY_ENGINE__ACTIVATION__FORCETWOPERSONAPPROVAL: "true"
+      STELLAOPS_POLICY_ENGINE__ACTIVATION__DEFAULTREQUIRESTWOPERSONAPPROVAL: "true"
+      STELLAOPS_POLICY_ENGINE__ACTIVATION__EMITAUDITLOGS: "true"
+
+services:
  concelier:
    image: registry.stella-ops.org/stellaops/concelier@sha256:dafef3954eb4b837e2c424dd2d23e1e4d60fa83794840fac9cd3dea1d43bd085
    service:
      port: 8445
    env:
      ASPNETCORE_URLS: "http://+:8445"
-      CONCELIER__STORAGE__MONGO__CONNECTIONSTRING: "mongodb://stellaops_mirror:mirror-password@stellaops-mongo:27017/concelier?authSource=admin"
-      CONCELIER__STORAGE__S3__ENDPOINT: "http://stellaops-minio:9000"
-      CONCELIER__STORAGE__S3__ACCESSKEYID: "stellaops-mirror"
-      CONCELIER__STORAGE__S3__SECRETACCESSKEY: "mirror-minio-secret"
+      CONCELIER__STORAGE__DRIVER: "postgres"
+      CONCELIER__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=concelier;Username=stellaops;Password=stellaops"
+      CONCELIER__STORAGE__S3__ENDPOINT: "http://stellaops-rustfs:8080"
+      CONCELIER__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
      CONCELIER__TELEMETRY__SERVICENAME: "stellaops-concelier-mirror"
      CONCELIER__MIRROR__ENABLED: "true"
      CONCELIER__MIRROR__EXPORTROOT: "/exports/json"
@@ -183,8 +183,8 @@ services:
    image: registry.stella-ops.org/stellaops/excititor@sha256:d9bd5cadf1eab427447ce3df7302c30ded837239771cc6433b9befb895054285
    env:
      ASPNETCORE_URLS: "http://+:8448"
-      EXCITITOR__STORAGE__MONGO__CONNECTIONSTRING: "mongodb://stellaops_mirror:mirror-password@stellaops-mongo:27017/excititor?authSource=admin"
-      EXCITITOR__STORAGE__MONGO__DATABASENAME: "excititor"
+      EXCITITOR__STORAGE__DRIVER: "postgres"
+      EXCITITOR__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=excititor;Username=stellaops;Password=stellaops"
      EXCITITOR__ARTIFACTS__FILESYSTEM__ROOT: "/exports"
      EXCITITOR__ARTIFACTS__FILESYSTEM__OVERWRITEEXISTING: "false"
      EXCITITOR__MIRROR__DOMAINS__0__ID: "primary"
@@ -220,43 +220,59 @@ services:
        secret:
          secretName: excititor-mirror-auth

-  mongo:
+  # Infrastructure services
+  postgres:
    class: infrastructure
-    image: docker.io/library/mongo@sha256:c258b26dbb7774f97f52aff52231ca5f228273a84329c5f5e451c3739457db49
+    image: docker.io/library/postgres@sha256:8e97b8526ed19304b144f7478bc9201646acf0723cdc6e4b19bc9eb34879a27e
    service:
-      port: 27017
-    command:
-      - mongod
-      - --bind_ip_all
+      port: 5432
    env:
-      MONGO_INITDB_ROOT_USERNAME: "stellaops_mirror"
-      MONGO_INITDB_ROOT_PASSWORD: "mirror-password"
+      POSTGRES_USER: stellaops
+      POSTGRES_PASSWORD: stellaops
+      POSTGRES_DB: stellaops
    volumeMounts:
-      - name: mongo-data
-        mountPath: /data/db
+      - name: postgres-data
+        mountPath: /var/lib/postgresql/data
    volumeClaims:
-      - name: mongo-data
-        claimName: mirror-mongo-data
+      - name: postgres-data
+        claimName: mirror-postgres-data

-  minio:
+  valkey:
    class: infrastructure
-    image: docker.io/minio/minio@sha256:14cea493d9a34af32f524e538b8346cf79f3321eff8e708c1e2960462bd8936e
+    image: docker.io/valkey/valkey:9.0.1-alpine
    service:
-      port: 9000
+      port: 6379
    command:
-      - server
-      - /data
-      - --console-address
-      - :9001
-    env:
-      MINIO_ROOT_USER: "stellaops-mirror"
-      MINIO_ROOT_PASSWORD: "mirror-minio-secret"
+      - valkey-server
+      - --appendonly
+      - "yes"
    volumeMounts:
-      - name: minio-data
+      - name: valkey-data
        mountPath: /data
    volumeClaims:
-      - name: minio-data
-        claimName: mirror-minio-data
+      - name: valkey-data
+        claimName: mirror-valkey-data
+
+  rustfs:
+    class: infrastructure
+    image: registry.stella-ops.org/stellaops/rustfs:2025.09.2
+    service:
+      port: 8080
+    command:
+      - serve
+      - --listen
+      - 0.0.0.0:8080
+      - --root
+      - /data
+    env:
+      RUSTFS__LOG__LEVEL: info
+      RUSTFS__STORAGE__PATH: /data
+    volumeMounts:
+      - name: rustfs-data
+        mountPath: /data
+    volumeClaims:
+      - name: rustfs-data
+        claimName: mirror-rustfs-data

  mirror-gateway:
    image: docker.io/library/nginx@sha256:208b70eefac13ee9be00e486f79c695b15cef861c680527171a27d253d834be9
--- a/devops/helm/stellaops/values-prod.yaml
+++ b/devops/helm/stellaops/values-prod.yaml
@@ -75,9 +75,8 @@ configMaps:
    data:
      notify.yaml: |
        storage:
-          driver: mongo
-          connectionString: "mongodb://stellaops-mongo:27017"
-          database: "stellaops_notify_prod"
+          driver: postgres
+          connectionString: "Host=stellaops-postgres;Port=5432;Database=notify;Username=stellaops;Password=stellaops"
          commandTimeoutSeconds: 45

        authority:
@@ -124,6 +123,9 @@ services:
      port: 8440
    env:
      STELLAOPS_AUTHORITY__ISSUER: "https://authority.prod.stella-ops.org"
+      STELLAOPS_AUTHORITY__STORAGE__DRIVER: "postgres"
+      STELLAOPS_AUTHORITY__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=authority;Username=stellaops;Password=stellaops"
+      STELLAOPS_AUTHORITY__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
      STELLAOPS_AUTHORITY__PLUGINDIRECTORIES__0: "/app/plugins"
      STELLAOPS_AUTHORITY__PLUGINS__CONFIGURATIONDIRECTORY: "/app/etc/authority.plugins"
    envFrom:
@@ -136,6 +138,9 @@ services:
    env:
      SIGNER__AUTHORITY__BASEURL: "https://stellaops-authority:8440"
      SIGNER__POE__INTROSPECTURL: "https://licensing.prod.stella-ops.org/introspect"
+      SIGNER__STORAGE__DRIVER: "postgres"
+      SIGNER__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=signer;Username=stellaops;Password=stellaops"
+      SIGNER__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
    envFrom:
      - secretRef:
          name: stellaops-prod-core
@@ -145,6 +150,9 @@ services:
      port: 8442
    env:
      ATTESTOR__SIGNER__BASEURL: "https://stellaops-signer:8441"
+      ATTESTOR__STORAGE__DRIVER: "postgres"
+      ATTESTOR__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=attestor;Username=stellaops;Password=stellaops"
+      ATTESTOR__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
    envFrom:
      - secretRef:
          name: stellaops-prod-core
@@ -153,7 +161,10 @@ services:
    service:
      port: 8445
    env:
-      CONCELIER__STORAGE__S3__ENDPOINT: "http://stellaops-minio:9000"
+      CONCELIER__STORAGE__DRIVER: "postgres"
+      CONCELIER__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=concelier;Username=stellaops;Password=stellaops"
+      CONCELIER__STORAGE__S3__ENDPOINT: "http://stellaops-rustfs:8080"
+      CONCELIER__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
      CONCELIER__AUTHORITY__BASEURL: "https://stellaops-authority:8440"
    envFrom:
      - secretRef:
@@ -169,15 +180,17 @@ services:
    service:
      port: 8444
    env:
+      SCANNER__STORAGE__DRIVER: "postgres"
+      SCANNER__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=scanner;Username=stellaops;Password=stellaops"
+      SCANNER__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
      SCANNER__ARTIFACTSTORE__DRIVER: "rustfs"
      SCANNER__ARTIFACTSTORE__ENDPOINT: "http://stellaops-rustfs:8080/api/v1"
      SCANNER__ARTIFACTSTORE__BUCKET: "scanner-artifacts"
      SCANNER__ARTIFACTSTORE__TIMEOUTSECONDS: "30"
-      SCANNER__QUEUE__BROKER: "nats://stellaops-nats:4222"
+      SCANNER__QUEUE__BROKER: "valkey://stellaops-valkey:6379"
      SCANNER__EVENTS__ENABLED: "true"
-      # Valkey (Redis-compatible) cache driver; keep "redis" for protocol compatibility.
-      SCANNER__EVENTS__DRIVER: "redis"
-      SCANNER__EVENTS__DSN: ""
+      SCANNER__EVENTS__DRIVER: "valkey"
+      SCANNER__EVENTS__DSN: "stellaops-valkey:6379"
      SCANNER__EVENTS__STREAM: "stella.events"
      SCANNER__EVENTS__PUBLISHTIMEOUTSECONDS: "5"
      SCANNER__EVENTS__MAXSTREAMLENGTH: "10000"
@@ -197,15 +210,17 @@ services:
    image: registry.stella-ops.org/stellaops/scanner-worker@sha256:32e25e76386eb9ea8bee0a1ad546775db9a2df989fab61ac877e351881960dab
    replicas: 3
    env:
+      SCANNER__STORAGE__DRIVER: "postgres"
+      SCANNER__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=scanner;Username=stellaops;Password=stellaops"
+      SCANNER__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
      SCANNER__ARTIFACTSTORE__DRIVER: "rustfs"
      SCANNER__ARTIFACTSTORE__ENDPOINT: "http://stellaops-rustfs:8080/api/v1"
      SCANNER__ARTIFACTSTORE__BUCKET: "scanner-artifacts"
      SCANNER__ARTIFACTSTORE__TIMEOUTSECONDS: "30"
-      SCANNER__QUEUE__BROKER: "nats://stellaops-nats:4222"
+      SCANNER__QUEUE__BROKER: "valkey://stellaops-valkey:6379"
      SCANNER__EVENTS__ENABLED: "true"
-      # Valkey (Redis-compatible) cache driver; keep "redis" for protocol compatibility.
-      SCANNER__EVENTS__DRIVER: "redis"
-      SCANNER__EVENTS__DSN: ""
+      SCANNER__EVENTS__DRIVER: "valkey"
+      SCANNER__EVENTS__DSN: "stellaops-valkey:6379"
      SCANNER__EVENTS__STREAM: "stella.events"
      SCANNER__EVENTS__PUBLISHTIMEOUTSECONDS: "5"
      SCANNER__EVENTS__MAXSTREAMLENGTH: "10000"
@@ -222,6 +237,8 @@ services:
      port: 8446
    env:
      DOTNET_ENVIRONMENT: Production
+      NOTIFY__QUEUE__DRIVER: "valkey"
+      NOTIFY__QUEUE__VALKEY__URL: "stellaops-valkey:6379"
    envFrom:
      - secretRef:
          name: stellaops-prod-notify
@@ -234,6 +251,8 @@ services:
    image: registry.stella-ops.org/stellaops/excititor@sha256:59022e2016aebcef5c856d163ae705755d3f81949d41195256e935ef40a627fa
    env:
      EXCITITOR__CONCELIER__BASEURL: "https://stellaops-concelier:8445"
+      EXCITITOR__STORAGE__DRIVER: "postgres"
+      EXCITITOR__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=excititor;Username=stellaops;Password=stellaops"
    envFrom:
      - secretRef:
          name: stellaops-prod-core
@@ -283,42 +302,37 @@ services:
      port: 8443
    env:
      STELLAOPS_UI__BACKEND__BASEURL: "https://stellaops-scanner-web:8444"
-  mongo:
+  # Infrastructure services
+  postgres:
    class: infrastructure
-    image: docker.io/library/mongo@sha256:c258b26dbb7774f97f52aff52231ca5f228273a84329c5f5e451c3739457db49
+    image: docker.io/library/postgres@sha256:8e97b8526ed19304b144f7478bc9201646acf0723cdc6e4b19bc9eb34879a27e
    service:
-      port: 27017
-    command:
-      - mongod
-      - --bind_ip_all
-    envFrom:
-      - secretRef:
-          name: stellaops-prod-mongo
+      port: 5432
+    env:
+      POSTGRES_USER: stellaops
+      POSTGRES_PASSWORD: stellaops
+      POSTGRES_DB: stellaops
    volumeMounts:
-      - name: mongo-data
-        mountPath: /data/db
+      - name: postgres-data
+        mountPath: /var/lib/postgresql/data
    volumeClaims:
-      - name: mongo-data
-        claimName: stellaops-mongo-data
-  minio:
+      - name: postgres-data
+        claimName: stellaops-postgres-data
+  valkey:
    class: infrastructure
-    image: docker.io/minio/minio@sha256:14cea493d9a34af32f524e538b8346cf79f3321eff8e708c1e2960462bd8936e
+    image: docker.io/valkey/valkey:9.0.1-alpine
    service:
-      port: 9000
+      port: 6379
    command:
-      - server
-      - /data
-      - --console-address
-      - :9001
-    envFrom:
-      - secretRef:
-          name: stellaops-prod-minio
+      - valkey-server
+      - --appendonly
+      - "yes"
    volumeMounts:
-      - name: minio-data
+      - name: valkey-data
        mountPath: /data
    volumeClaims:
-      - name: minio-data
-        claimName: stellaops-minio-data
+      - name: valkey-data
+        claimName: stellaops-valkey-data
  rustfs:
    class: infrastructure
    image: registry.stella-ops.org/stellaops/rustfs:2025.09.2
--- a/devops/helm/stellaops/values-stage.yaml
+++ b/devops/helm/stellaops/values-stage.yaml
@@ -21,9 +21,8 @@ configMaps:
    data:
      notify.yaml: |
        storage:
-          driver: mongo
-          connectionString: "mongodb://notify-mongo.stage.svc.cluster.local:27017"
-          database: "stellaops_notify_stage"
+          driver: postgres
+          connectionString: "Host=stellaops-postgres;Port=5432;Database=notify;Username=stellaops;Password=stellaops"
          commandTimeoutSeconds: 45

        authority:
@@ -70,7 +69,9 @@ services:
      port: 8440
    env:
      STELLAOPS_AUTHORITY__ISSUER: "https://stellaops-authority:8440"
-      STELLAOPS_AUTHORITY__MONGO__CONNECTIONSTRING: "mongodb://stellaops-stage:stellaops-stage@stellaops-mongo:27017"
+      STELLAOPS_AUTHORITY__STORAGE__DRIVER: "postgres"
+      STELLAOPS_AUTHORITY__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=authority;Username=stellaops;Password=stellaops"
+      STELLAOPS_AUTHORITY__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
      STELLAOPS_AUTHORITY__PLUGINDIRECTORIES__0: "/app/plugins"
      STELLAOPS_AUTHORITY__PLUGINS__CONFIGURATIONDIRECTORY: "/app/etc/authority.plugins"
  signer:
@@ -80,23 +81,27 @@ services:
    env:
      SIGNER__AUTHORITY__BASEURL: "https://stellaops-authority:8440"
      SIGNER__POE__INTROSPECTURL: "https://licensing.stage.stella-ops.internal/introspect"
-      SIGNER__STORAGE__MONGO__CONNECTIONSTRING: "mongodb://stellaops-stage:stellaops-stage@stellaops-mongo:27017"
+      SIGNER__STORAGE__DRIVER: "postgres"
+      SIGNER__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=signer;Username=stellaops;Password=stellaops"
+      SIGNER__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
  attestor:
    image: registry.stella-ops.org/stellaops/attestor@sha256:0534985f978b0b5d220d73c96fddd962cd9135f616811cbe3bff4666c5af568f
    service:
      port: 8442
    env:
      ATTESTOR__SIGNER__BASEURL: "https://stellaops-signer:8441"
-      ATTESTOR__MONGO__CONNECTIONSTRING: "mongodb://stellaops-stage:stellaops-stage@stellaops-mongo:27017"
+      ATTESTOR__STORAGE__DRIVER: "postgres"
+      ATTESTOR__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=attestor;Username=stellaops;Password=stellaops"
+      ATTESTOR__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
  concelier:
    image: registry.stella-ops.org/stellaops/concelier@sha256:c58cdcaee1d266d68d498e41110a589dd204b487d37381096bd61ab345a867c5
    service:
      port: 8445
    env:
-      CONCELIER__STORAGE__MONGO__CONNECTIONSTRING: "mongodb://stellaops-stage:stellaops-stage@stellaops-mongo:27017"
-      CONCELIER__STORAGE__S3__ENDPOINT: "http://stellaops-minio:9000"
-      CONCELIER__STORAGE__S3__ACCESSKEYID: "stellaops-stage"
-      CONCELIER__STORAGE__S3__SECRETACCESSKEY: "stage-minio-secret"
+      CONCELIER__STORAGE__DRIVER: "postgres"
+      CONCELIER__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=concelier;Username=stellaops;Password=stellaops"
+      CONCELIER__STORAGE__S3__ENDPOINT: "http://stellaops-rustfs:8080"
+      CONCELIER__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
      CONCELIER__AUTHORITY__BASEURL: "https://stellaops-authority:8440"
    volumeMounts:
      - name: concelier-jobs
@@ -109,16 +114,17 @@ services:
    service:
      port: 8444
    env:
-      SCANNER__STORAGE__MONGO__CONNECTIONSTRING: "mongodb://stellaops-stage:stellaops-stage@stellaops-mongo:27017"
+      SCANNER__STORAGE__DRIVER: "postgres"
+      SCANNER__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=scanner;Username=stellaops;Password=stellaops"
+      SCANNER__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
      SCANNER__ARTIFACTSTORE__DRIVER: "rustfs"
      SCANNER__ARTIFACTSTORE__ENDPOINT: "http://stellaops-rustfs:8080/api/v1"
      SCANNER__ARTIFACTSTORE__BUCKET: "scanner-artifacts"
      SCANNER__ARTIFACTSTORE__TIMEOUTSECONDS: "30"
-      SCANNER__QUEUE__BROKER: "nats://stellaops-nats:4222"
+      SCANNER__QUEUE__BROKER: "valkey://stellaops-valkey:6379"
      SCANNER__EVENTS__ENABLED: "false"
-      # Valkey (Redis-compatible) cache driver; keep "redis" for protocol compatibility.
-      SCANNER__EVENTS__DRIVER: "redis"
-      SCANNER__EVENTS__DSN: ""
+      SCANNER__EVENTS__DRIVER: "valkey"
+      SCANNER__EVENTS__DSN: "stellaops-valkey:6379"
      SCANNER__EVENTS__STREAM: "stella.events"
      SCANNER__EVENTS__PUBLISHTIMEOUTSECONDS: "5"
      SCANNER__EVENTS__MAXSTREAMLENGTH: "10000"
@@ -135,16 +141,17 @@ services:
    image: registry.stella-ops.org/stellaops/scanner-worker@sha256:32e25e76386eb9ea8bee0a1ad546775db9a2df989fab61ac877e351881960dab
    replicas: 2
    env:
-      SCANNER__STORAGE__MONGO__CONNECTIONSTRING: "mongodb://stellaops-stage:stellaops-stage@stellaops-mongo:27017"
+      SCANNER__STORAGE__DRIVER: "postgres"
+      SCANNER__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=scanner;Username=stellaops;Password=stellaops"
+      SCANNER__CACHE__REDIS__CONNECTIONSTRING: "stellaops-valkey:6379"
      SCANNER__ARTIFACTSTORE__DRIVER: "rustfs"
      SCANNER__ARTIFACTSTORE__ENDPOINT: "http://stellaops-rustfs:8080/api/v1"
      SCANNER__ARTIFACTSTORE__BUCKET: "scanner-artifacts"
      SCANNER__ARTIFACTSTORE__TIMEOUTSECONDS: "30"
-      SCANNER__QUEUE__BROKER: "nats://stellaops-nats:4222"
+      SCANNER__QUEUE__BROKER: "valkey://stellaops-valkey:6379"
      SCANNER__EVENTS__ENABLED: "false"
-      # Valkey (Redis-compatible) cache driver; keep "redis" for protocol compatibility.
-      SCANNER__EVENTS__DRIVER: "redis"
-      SCANNER__EVENTS__DSN: ""
+      SCANNER__EVENTS__DRIVER: "valkey"
+      SCANNER__EVENTS__DSN: "stellaops-valkey:6379"
      SCANNER__EVENTS__STREAM: "stella.events"
      SCANNER__EVENTS__PUBLISHTIMEOUTSECONDS: "5"
      SCANNER__EVENTS__MAXSTREAMLENGTH: "10000"
@@ -158,6 +165,8 @@ services:
      port: 8446
    env:
      DOTNET_ENVIRONMENT: Production
+      NOTIFY__QUEUE__DRIVER: "valkey"
+      NOTIFY__QUEUE__VALKEY__URL: "stellaops-valkey:6379"
    configMounts:
      - name: notify-config
        mountPath: /app/etc/notify.yaml
@@ -167,49 +176,46 @@ services:
    image: registry.stella-ops.org/stellaops/excititor@sha256:59022e2016aebcef5c856d163ae705755d3f81949d41195256e935ef40a627fa
    env:
      EXCITITOR__CONCELIER__BASEURL: "https://stellaops-concelier:8445"
-      EXCITITOR__STORAGE__MONGO__CONNECTIONSTRING: "mongodb://stellaops-stage:stellaops-stage@stellaops-mongo:27017"
+      EXCITITOR__STORAGE__DRIVER: "postgres"
+      EXCITITOR__STORAGE__POSTGRES__CONNECTIONSTRING: "Host=stellaops-postgres;Port=5432;Database=excititor;Username=stellaops;Password=stellaops"
  web-ui:
    image: registry.stella-ops.org/stellaops/web-ui@sha256:10d924808c48e4353e3a241da62eb7aefe727a1d6dc830eb23a8e181013b3a23
    service:
      port: 8443
    env:
      STELLAOPS_UI__BACKEND__BASEURL: "https://stellaops-scanner-web:8444"
-  mongo:
+
+  # Infrastructure services
+  postgres:
    class: infrastructure
-    image: docker.io/library/mongo@sha256:c258b26dbb7774f97f52aff52231ca5f228273a84329c5f5e451c3739457db49
+    image: docker.io/library/postgres@sha256:8e97b8526ed19304b144f7478bc9201646acf0723cdc6e4b19bc9eb34879a27e
    service:
-      port: 27017
-    command:
-      - mongod
-      - --bind_ip_all
+      port: 5432
    env:
-      MONGO_INITDB_ROOT_USERNAME: stellaops-stage
-      MONGO_INITDB_ROOT_PASSWORD: stellaops-stage
+      POSTGRES_USER: stellaops
+      POSTGRES_PASSWORD: stellaops
+      POSTGRES_DB: stellaops
    volumeMounts:
-      - name: mongo-data
-        mountPath: /data/db
+      - name: postgres-data
+        mountPath: /var/lib/postgresql/data
    volumeClaims:
-      - name: mongo-data
-        claimName: stellaops-mongo-data
-  minio:
+      - name: postgres-data
+        claimName: stellaops-postgres-data
+  valkey:
    class: infrastructure
-    image: docker.io/minio/minio@sha256:14cea493d9a34af32f524e538b8346cf79f3321eff8e708c1e2960462bd8936e
+    image: docker.io/valkey/valkey:9.0.1-alpine
    service:
-      port: 9000
+      port: 6379
    command:
-      - server
-      - /data
-      - --console-address
-      - :9001
-    env:
-      MINIO_ROOT_USER: stellaops-stage
-      MINIO_ROOT_PASSWORD: stage-minio-secret
+      - valkey-server
+      - --appendonly
+      - "yes"
    volumeMounts:
-      - name: minio-data
+      - name: valkey-data
        mountPath: /data
    volumeClaims:
-      - name: minio-data
-        claimName: stellaops-minio-data
+      - name: valkey-data
+        claimName: stellaops-valkey-data
  rustfs:
    class: infrastructure
    image: registry.stella-ops.org/stellaops/rustfs:2025.09.2
@@ -230,19 +236,3 @@ services:
    volumeClaims:
      - name: rustfs-data
        claimName: stellaops-rustfs-data
-  nats:
-    class: infrastructure
-    image: docker.io/library/nats@sha256:c82559e4476289481a8a5196e675ebfe67eea81d95e5161e3e78eccfe766608e
-    service:
-      port: 4222
-    command:
-      - -js
-      - -sd
-      - /data
-    volumeMounts:
-      - name: nats-data
-        mountPath: /data
-    volumeClaims:
-      - name: nats-data
-        claimName: stellaops-nats-data
-
--- a/devops/helm/stellaops/values.yaml
+++ b/devops/helm/stellaops/values.yaml
@@ -171,13 +171,10 @@ configMaps:
          tenantHeader: X-StellaOps-Tenant
          seedCsafPublishers: true
          csafSeedPath: data/csaf-publishers.json
-          Mongo:
-            connectionString: mongodb://mongo:27017
-            database: issuer-directory
-            issuersCollection: issuers
-            issuerKeysCollection: issuer_keys
-            issuerTrustCollection: issuer_trust_overrides
-            auditCollection: issuer_audit
+          Storage:
+            Driver: postgres
+            Postgres:
+              ConnectionString: Host=postgres;Port=5432;Database=issuer_directory;Username=stellaops;Password=stellaops

  policy-engine-activation:
    data:
@@ -224,10 +221,10 @@ services:
      - dotnet
      - StellaOps.Scheduler.Worker.Host.dll
    env:
-      SCHEDULER__QUEUE__KIND: Nats
-      SCHEDULER__QUEUE__NATS__URL: nats://nats:4222
-      SCHEDULER__STORAGE__CONNECTIONSTRING: mongodb://scheduler-mongo:27017
-      SCHEDULER__STORAGE__DATABASE: stellaops_scheduler
+      SCHEDULER__QUEUE__KIND: Valkey
+      SCHEDULER__QUEUE__VALKEY__URL: valkey:6379
+      SCHEDULER__STORAGE__DRIVER: postgres
+      SCHEDULER__STORAGE__POSTGRES__CONNECTIONSTRING: Host=postgres;Port=5432;Database=scheduler;Username=stellaops;Password=stellaops
      SCHEDULER__WORKER__RUNNER__SCANNER__BASEADDRESS: http://scanner-web:8444
  advisory-ai-web:
    image: registry.stella-ops.org/stellaops/advisory-ai-web:2025.10.0-edge