Manage routine operations through Ansible

runbooks/matrix-health.md

@@ -2,7 +2,14 @@
 
 Monitor the Matrix homeserver running on `synapse.chans.xyz` (ESS chart `26.7.2`, K3s node).
 
-## Basic checks
+Prefer `cd ansible && ansible-playbook playbooks/health-report.yml --limit matrix`
+for the routine report. The SSH commands below remain diagnostic detail.
+
+## Focused SSH diagnostics
+
+Use these only after the Ansible health report needs investigation.
+
+### Basic checks
 
 ```bash
 # Overall status
@@ -15,7 +22,7 @@ ssh -4 windy@synapse.chans.xyz 'sudo k3s kubectl -n ess get pods -o wide | grep
 ssh -4 windy@synapse.chans.xyz 'df -hP /'
 ```
 
-## Certificate verification
+### Certificate verification
 
 ```bash
 ssh -4 windy@synapse.chans.xyz 'sudo k3s kubectl -n ess get certificate'
@@ -29,7 +36,7 @@ All certificates should show `READY=True`. Domains:
 - `admin.chans.xyz`
 - `mrtc.chans.xyz` (placeholder only)
 
-## External endpoint verification
+### External endpoint verification
 
 ```bash
 # Client API