memory: sync session state 2026-06-19 (redacted for Forgejo)
- MEMORY.md: current index with latest status entries - project-kitestacks-migration.md: full updated history — kscloud1 SSH restored, Forgejo+BookStack SSO fixed, 2-connector active-active confirmed - project-kitestacks-services.md: monk Forgejo on shared PG, OSTicket SMTP live, no pending items - project-a-plus-core2.md: quiz log updated with OS-1/OS-2 results IPs, passwords, and API tokens redacted per Forgejo security policy. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
parent
92cb104838
commit
c780c8c97b
4 changed files with 80 additions and 497 deletions
|
|
@ -30,22 +30,28 @@ authentik, authentik-worker, authentik-ldap, authentik-ldap-proxy, bookstack, bo
|
|||
- OSTicket SMTP configured: smtp.gmail.com:587, kitestacks.helpdesk@gmail.com, app password stored in ost_email table (smtp_auth_creds=1 for all 3 emails)
|
||||
- portainer.kitestacks.com CF tunnel hostname — user confirmed already set in CF dashboard
|
||||
|
||||
## Completed 2026-06-18 (this session)
|
||||
## Completed 2026-06-18/19 (this session)
|
||||
- Forgejo repo reorganization: kitestacks-cloud, kitestacks-cloud-migration, kitestacks-homelab-autosync-test, OSTicketSystem merged as subdirs (cloud/, cloud-migration/, autosync/, osticket/) into kitestacks-homelab repo. Committed and pushed.
|
||||
- comptia-a-plus-core2 Forgejo repo updated: merged study-tracker content, added certifications/ dir, updated exam goal to July 7.
|
||||
- homelab-mastery Forgejo repo: architecture/overview.md and build-guide/README.md rewritten in plain English.
|
||||
- RUNBOOK.md + DEBUG-DOCUMENTATION.md: rewritten in 5th-grade plain English in kitestacks-homelab repo.
|
||||
- All 6 BookStack pages updated via API (Runbook, Debug, Architecture, Build Guide, AI Guide, Manual Guide).
|
||||
- Forgejo API token via external URL broken (Cloudflare strips Authorization header). Works via localhost:3006.
|
||||
- BookStack API token created (claude-push-825981) via DB injection + bcrypt hash. Works internally.
|
||||
- BookStack API token created (claude-push-825981) via DB injection + bcrypt hash.
|
||||
- **monk Forgejo migrated to shared PostgreSQL (2026-06-19):** Used `forgejo dump --database postgres` to generate clean SQL, dropped pgloader schema, reloaded. Both Cloudflare connectors now return 200 for API token `[redacted]`. Monk reads from `authentik-postgres` at `100.x.x.x:5432`, DB name `forgejo`, user `forgejo`.
|
||||
- SQLite backup at: `~/kitestacks-live/docker/forgejo/data/gitea/gitea.db.backup-20260618-230715`
|
||||
|
||||
## Completed 2026-06-19
|
||||
- kscloud1 SSH restored: key added to /home/kenpat/.ssh/authorized_keys (user is `kenpat`, not `kenpatmonk`). SSH via `ssh -i ~/.ssh/id_ed25519_kscloud1 kenpat@100.x.x.x`.
|
||||
- kscloud1 Forgejo migrated to shared PostgreSQL: compose at /opt/kitestacks/docker/forgejo/docker-compose.yml, joined authentik_default network to reach authentik-postgres:5432. 20/20 external API requests pass.
|
||||
- BookStack kscloud1 OIDC: already configured, cache perms fixed, OIDC login redirects to auth.kitestacks.com correctly.
|
||||
|
||||
## Confirmed working
|
||||
- OSTicket SMTP (smtp.gmail.com:587, kitestacks.helpdesk@gmail.com) — confirmed 2026-06-19.
|
||||
- Portainer Authentik OAuth SSO — confirmed working 2026-06-19.
|
||||
- Old standalone repos archived 2026-06-19: kitestacks-cloud, kitestacks-cloud-migration, kitestacks-homelab-autosync-test, OSTicketSystem.
|
||||
|
||||
## Pending
|
||||
- BookStack kscloud1: update compose (OIDC_ISSUER=https://auth.kitestacks.com/application/o/bookstack/, OIDC_ISSUER_DISCOVER=true), restart, fix cache perms (chown -R abc:users /config/www/framework/cache/). Blocked by kscloud1 SSH key needs re-adding.
|
||||
- kscloud1 SSH: re-add id_ed25519_kscloud1.pub key via Hetzner VNC console.
|
||||
- OSTicket SMTP test email — verify delivery works.
|
||||
- Archive/delete now-redundant standalone repos (kitestacks-cloud, kitestacks-cloud-migration, kitestacks-homelab-autosync-test, OSTicketSystem) once user confirms move is good.
|
||||
- Portainer Authentik OAuth setup on both Portainer UIs (manual user action).
|
||||
- Forgejo Authorization header fix: investigate why Cloudflare strips the token header for API calls (may need Cloudflare WAF rule or different auth method).
|
||||
- (none)
|
||||
|
||||
## Completed 2026-06-18
|
||||
- Portainer OAuth: both monk + kscloud1 configured (AuthenticationMethod=3, Authentik SSO). OAuth user kenpat7177@gmail.com pre-created as Role:1 (admin) on both. Local Docker environment added to both. Portal card already live.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue