add dbgate and mssql

docs/AI_CONTEXT.md

@@ -19,6 +19,7 @@ Public IP: 51.255.83.140
 ## Core Services
 
 * PostgreSQL
+* Microsoft SQL Server 2022 Express
 * Gitea
 * OpenProject
 * Jitsi Meet
@@ -26,6 +27,7 @@ Public IP: 51.255.83.140
 * Nginx Proxy Manager
 * BaGet
 * Gitea Actions Runner (`silverlinux-runner`)
+* DbGate
 
 ## Domains
 
@@ -39,6 +41,8 @@ portainer.silveressence.net -> Portainer
 
 nuget.silveressence.net -> BaGet (through Nginx Proxy Manager)
 
+dbgate.silveressence.net -> DbGate (through Nginx Proxy Manager)
+
 ## Secrets
 
 Secrets are stored in:
@@ -54,10 +58,19 @@ Always use env_file.
 proxy
 internal
 
+MSSQL is attached only to `internal`. DbGate is attached to both `internal` and `proxy`.
+
 ## Authentication
 
 Gitea:
 
+* Local accounts
+* OpenID disabled
+* Google OAuth planned
+* GitHub OAuth planned
+
+OpenProject:
+
 * Local accounts
 
 ## CI/CD
@@ -69,13 +82,14 @@ The global self-hosted runner is operational at `/srv/docker/gitea-runner` with
 Silver 2.0 uses `.gitea/workflows/package.yml` to publish NuGet packages to BaGet when a push to `net-8-version` has a commit message containing `[Package]`.
 
 The runner registration token is stored in `/srv/secrets/company.env`. The BaGet publishing key is stored as the repository Actions secret `BAGET_API_KEY`.
-* OpenID disabled
-* Google OAuth planned
-* GitHub OAuth planned
 
-OpenProject:
+## Databases
 
-* Local accounts
+PostgreSQL 17 and Microsoft SQL Server 2022 Express are operational.
+
+MSSQL uses hostname `mssql` on the `internal` Docker network. Port 1433 is not published.
+
+DbGate provides authenticated HTTPS administration for MSSQL and PostgreSQL at `https://dbgate.silveressence.net`.
 
 ## Documentation
 
@@ -94,3 +108,5 @@ and the README.md of each service folder before making infrastructure recommenda
 * PostgreSQL selected as shared database platform
 * BaGet deployed at nuget.silveressence.net through Nginx Proxy Manager
 * Gitea Actions and a global self-hosted runner selected for package publishing
+* MSSQL Express deployed alongside PostgreSQL
+* DbGate selected as the database administration portal