diff --git a/k8s/openclaw/cronjob-wiki-audit.secret.yaml b/k8s/openclaw/cronjob-wiki-audit.secret.yaml
new file mode 100644
index 0000000..aefccf2
Binary files /dev/null and b/k8s/openclaw/cronjob-wiki-audit.secret.yaml differ
diff --git a/k8s/openclaw/openclaw-instance.secret.yaml b/k8s/openclaw/openclaw-instance.secret.yaml
index 72bb429..a4828b6 100644
Binary files a/k8s/openclaw/openclaw-instance.secret.yaml and b/k8s/openclaw/openclaw-instance.secret.yaml differ
diff --git a/k8s/openclaw/silverbullet.secret.yaml b/k8s/openclaw/silverbullet.secret.yaml
new file mode 100644
index 0000000..2cd44fa
Binary files /dev/null and b/k8s/openclaw/silverbullet.secret.yaml differ
diff --git a/knowledge-wiki b/knowledge-wiki
index a65f5c7..acc8d02 160000
--- a/knowledge-wiki
+++ b/knowledge-wiki
@@ -1 +1 @@
-Subproject commit a65f5c759d1f55125fc797bf5141964975237611
+Subproject commit acc8d022b685132b46abc4146142619c7e7c68ed
diff --git a/terraform/authentik.tf b/terraform/authentik.tf
index 333b2db..a7a935a 100644
--- a/terraform/authentik.tf
+++ b/terraform/authentik.tf
@@ -330,6 +330,22 @@ resource "authentik_application" "n8n" {
   protocol_provider = authentik_provider_proxy.n8n.id
 }
 
+# 9. SilverBullet Wiki
+resource "authentik_provider_proxy" "silverbullet" {
+  name                  = "SilverBullet"
+  external_host         = "https://wiki.moritzgraf.de"
+  mode                  = "forward_single"
+  authorization_flow    = data.authentik_flow.default_authorization_flow.id
+  invalidation_flow     = data.authentik_flow.default_invalidation_flow.id
+  intercept_header_auth = true
+}
+
+resource "authentik_application" "silverbullet" {
+  name              = "SilverBullet"
+  slug              = "silverbullet"
+  protocol_provider = authentik_provider_proxy.silverbullet.id
+}
+
 # --- Outpost: Embedded Proxy Outpost ---
 
 resource "authentik_outpost" "embedded" {
@@ -344,6 +360,7 @@ resource "authentik_outpost" "embedded" {
     authentik_provider_proxy.hass_coder.id,
     authentik_provider_proxy.openclaw.id,
     authentik_provider_proxy.n8n.id,
+    authentik_provider_proxy.silverbullet.id,
   ]
 }
 
@@ -717,6 +734,12 @@ resource "authentik_policy_binding" "minio_admin_only" {
   order  = 0
 }
 
+resource "authentik_policy_binding" "silverbullet_admin_only" {
+  target = authentik_application.silverbullet.uuid
+  group  = authentik_group.infra_admins.id
+  order  = 0
+}
+
 # 2. Shared & Member Applications (Accessible to all authenticated users)
 resource "authentik_policy_binding" "grafana_users" {
   target = authentik_application.grafana.uuid