Sync memory: repo reorg done, study goal updated to July 7, services inventory updated

- MEMORY.md: updated index entries for study plan and service inventory
- project-a-plus-core2.md: exam goal updated to July 7, 2026 (was June 28)
- project-kitestacks-services.md: added (new file) — full service inventory with
  completed/pending work from 2026-06-18 session including repo consolidation,
  doc rewrites, BookStack API setup, and Forgejo Authorization header bug note

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

project-kitestacks-services.md

@@ -0,0 +1,56 @@
+---
+name: project-kitestacks-services
+description: "KiteStacks homelab service inventory — what's running, what's available but not running, and refinement ideas"
+metadata: 
+  node_type: memory
+  type: project
+  originSessionId: d6a84312-592d-459d-9369-9f4ae53a3afa
+---
+
+## Currently Running on monk (as of 2026-06-18)
+authentik, authentik-worker, authentik-ldap, authentik-ldap-proxy, bookstack, bookstack-db, cloudflared, flux, forgejo, grafana, homepage, karakeep, karakeep-chrome, karakeep-meilisearch, kavita, kite-litellm, kite-openwebui, kitestacks-metrics-api, kitestacks-portal-test, node-exporter, ntfy, osticket, osticket-app, osticket-db, portainer, prometheus, uptime-kuma, blackbox-exporter
+
+## Available but NOT running on monk
+- audiobookshelf — audiobook server
+- plane — project management (like Linear/Jira)
+- postgres — standalone postgres (authentik uses kscloud1 shared one)
+
+## Removed 2026-06-17
+- linkding — removed (karakeep overlaps)
+- zammad — removed (osticket is the helpdesk)
+
+## kscloud1 extras vs monk
+- kite-monitor — Tailscale-only live stats dashboard (new, 2026-06-17)
+- osticket-app-118, osticket-db-118 — second osticket instance (118 version)
+- www-backup, homepage-backup — portal replicas
+
+## Completed refinements 2026-06-17/18
+- linkding + zammad removed from monk
+- kitestacks-portal synced from portal-test (added Discord/COMMUNITY section), pushed to kscloud1
+- OSTicket SMTP configured: smtp.gmail.com:587, kitestacks.helpdesk@gmail.com, app password stored in ost_email table (smtp_auth_creds=1 for all 3 emails)
+- portainer.kitestacks.com CF tunnel hostname — user confirmed already set in CF dashboard
+
+## Completed 2026-06-18 (this session)
+- Forgejo repo reorganization: kitestacks-cloud, kitestacks-cloud-migration, kitestacks-homelab-autosync-test, OSTicketSystem merged as subdirs (cloud/, cloud-migration/, autosync/, osticket/) into kitestacks-homelab repo. Committed and pushed.
+- comptia-a-plus-core2 Forgejo repo updated: merged study-tracker content, added certifications/ dir, updated exam goal to July 7.
+- homelab-mastery Forgejo repo: architecture/overview.md and build-guide/README.md rewritten in plain English.
+- RUNBOOK.md + DEBUG-DOCUMENTATION.md: rewritten in 5th-grade plain English in kitestacks-homelab repo.
+- All 6 BookStack pages updated via API (Runbook, Debug, Architecture, Build Guide, AI Guide, Manual Guide).
+- Forgejo API token via external URL broken (Cloudflare strips Authorization header). Works via localhost:3006.
+- BookStack API token created (claude-push-825981) via DB injection + bcrypt hash. Works internally.
+
+## Pending
+- BookStack kscloud1: update compose (OIDC_ISSUER=https://auth.kitestacks.com/application/o/bookstack/, OIDC_ISSUER_DISCOVER=true), restart, fix cache perms (chown -R abc:users /config/www/framework/cache/). Blocked by kscloud1 SSH key needs re-adding.
+- kscloud1 SSH: re-add id_ed25519_kscloud1.pub key via Hetzner VNC console.
+- OSTicket SMTP test email — verify delivery works.
+- Archive/delete now-redundant standalone repos (kitestacks-cloud, kitestacks-cloud-migration, kitestacks-homelab-autosync-test, OSTicketSystem) once user confirms move is good.
+- Portainer Authentik OAuth setup on both Portainer UIs (manual user action).
+- Forgejo Authorization header fix: investigate why Cloudflare strips the token header for API calls (may need Cloudflare WAF rule or different auth method).
+
+## Completed 2026-06-18
+- Portainer OAuth: both monk + kscloud1 configured (AuthenticationMethod=3, Authentik SSO). OAuth user kenpat7177@gmail.com pre-created as Role:1 (admin) on both. Local Docker environment added to both. Portal card already live.
+- BookStack monk: live at https://wiki.kitestacks.com. OIDC SSO to Authentik working (verified 302 redirect). Root fixes: Authentik bookstack provider issuer_mode changed to per_provider, OIDC_ISSUER=https://auth.kitestacks.com/application/o/bookstack/, OIDC_ISSUER_DISCOVER=true, cache dir permissions fixed (chown -R abc:users /config/www/framework/cache/).
+- Discord community section removed from portal; Discord icon moved to footer. BookStack card added to KNOWLEDGE BASE panel. Applied to monk live, monk dev, and kscloud1 portal.
+- Portal changes applied to all 3 portal copies (monk live, monk dev, kscloud1).
+
+## How to apply: when user asks about homelab services, reference this inventory to suggest what to spin up or improve.