K8s injects TRILIUM_PORT=tcp://... from the service, but Trilium expects an integer. enableServiceLinks: false prevents the collision.
namespace, deployment, PVC (2Gi local-path), service, Traefik ingress with letsencrypt-prod TLS at trilium.chemavx.xyz, ArgoCD Application.