claude-memory/project-kitestacks-services.md
kenpat c780c8c97b memory: sync session state 2026-06-19 (redacted for Forgejo)
- MEMORY.md: current index with latest status entries
- project-kitestacks-migration.md: full updated history — kscloud1 SSH
  restored, Forgejo+BookStack SSO fixed, 2-connector active-active confirmed
- project-kitestacks-services.md: monk Forgejo on shared PG, OSTicket SMTP
  live, no pending items
- project-a-plus-core2.md: quiz log updated with OS-1/OS-2 results

IPs, passwords, and API tokens redacted per Forgejo security policy.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-19 02:51:26 -05:00

4.7 KiB

name description metadata
project-kitestacks-services KiteStacks homelab service inventory — what's running, what's available but not running, and refinement ideas
node_type type originSessionId
memory project d6a84312-592d-459d-9369-9f4ae53a3afa

Currently Running on monk (as of 2026-06-18)

authentik, authentik-worker, authentik-ldap, authentik-ldap-proxy, bookstack, bookstack-db, cloudflared, flux, forgejo, grafana, homepage, karakeep, karakeep-chrome, karakeep-meilisearch, kavita, kite-litellm, kite-openwebui, kitestacks-metrics-api, kitestacks-portal-test, node-exporter, ntfy, osticket, osticket-app, osticket-db, portainer, prometheus, uptime-kuma, blackbox-exporter

Available but NOT running on monk

  • audiobookshelf — audiobook server
  • plane — project management (like Linear/Jira)
  • postgres — standalone postgres (authentik uses kscloud1 shared one)

Removed 2026-06-17

  • linkding — removed (karakeep overlaps)
  • zammad — removed (osticket is the helpdesk)

kscloud1 extras vs monk

  • kite-monitor — Tailscale-only live stats dashboard (new, 2026-06-17)
  • osticket-app-118, osticket-db-118 — second osticket instance (118 version)
  • www-backup, homepage-backup — portal replicas

Completed refinements 2026-06-17/18

  • linkding + zammad removed from monk
  • kitestacks-portal synced from portal-test (added Discord/COMMUNITY section), pushed to kscloud1
  • OSTicket SMTP configured: smtp.gmail.com:587, kitestacks.helpdesk@gmail.com, app password stored in ost_email table (smtp_auth_creds=1 for all 3 emails)
  • portainer.kitestacks.com CF tunnel hostname — user confirmed already set in CF dashboard

Completed 2026-06-18/19 (this session)

  • Forgejo repo reorganization: kitestacks-cloud, kitestacks-cloud-migration, kitestacks-homelab-autosync-test, OSTicketSystem merged as subdirs (cloud/, cloud-migration/, autosync/, osticket/) into kitestacks-homelab repo. Committed and pushed.
  • comptia-a-plus-core2 Forgejo repo updated: merged study-tracker content, added certifications/ dir, updated exam goal to July 7.
  • homelab-mastery Forgejo repo: architecture/overview.md and build-guide/README.md rewritten in plain English.
  • RUNBOOK.md + DEBUG-DOCUMENTATION.md: rewritten in 5th-grade plain English in kitestacks-homelab repo.
  • All 6 BookStack pages updated via API (Runbook, Debug, Architecture, Build Guide, AI Guide, Manual Guide).
  • BookStack API token created (claude-push-825981) via DB injection + bcrypt hash.
  • monk Forgejo migrated to shared PostgreSQL (2026-06-19): Used forgejo dump --database postgres to generate clean SQL, dropped pgloader schema, reloaded. Both Cloudflare connectors now return 200 for API token [redacted]. Monk reads from authentik-postgres at 100.x.x.x:5432, DB name forgejo, user forgejo.
  • SQLite backup at: ~/kitestacks-live/docker/forgejo/data/gitea/gitea.db.backup-20260618-230715

Completed 2026-06-19

  • kscloud1 SSH restored: key added to /home/kenpat/.ssh/authorized_keys (user is kenpat, not kenpatmonk). SSH via ssh -i ~/.ssh/id_ed25519_kscloud1 kenpat@100.x.x.x.
  • kscloud1 Forgejo migrated to shared PostgreSQL: compose at /opt/kitestacks/docker/forgejo/docker-compose.yml, joined authentik_default network to reach authentik-postgres:5432. 20/20 external API requests pass.
  • BookStack kscloud1 OIDC: already configured, cache perms fixed, OIDC login redirects to auth.kitestacks.com correctly.

Confirmed working

  • OSTicket SMTP (smtp.gmail.com:587, kitestacks.helpdesk@gmail.com) — confirmed 2026-06-19.
  • Portainer Authentik OAuth SSO — confirmed working 2026-06-19.
  • Old standalone repos archived 2026-06-19: kitestacks-cloud, kitestacks-cloud-migration, kitestacks-homelab-autosync-test, OSTicketSystem.

Pending

  • (none)

Completed 2026-06-18

  • Portainer OAuth: both monk + kscloud1 configured (AuthenticationMethod=3, Authentik SSO). OAuth user kenpat7177@gmail.com pre-created as Role:1 (admin) on both. Local Docker environment added to both. Portal card already live.
  • BookStack monk: live at https://wiki.kitestacks.com. OIDC SSO to Authentik working (verified 302 redirect). Root fixes: Authentik bookstack provider issuer_mode changed to per_provider, OIDC_ISSUER=https://auth.kitestacks.com/application/o/bookstack/, OIDC_ISSUER_DISCOVER=true, cache dir permissions fixed (chown -R abc:users /config/www/framework/cache/).
  • Discord community section removed from portal; Discord icon moved to footer. BookStack card added to KNOWLEDGE BASE panel. Applied to monk live, monk dev, and kscloud1 portal.
  • Portal changes applied to all 3 portal copies (monk live, monk dev, kscloud1).

How to apply: when user asks about homelab services, reference this inventory to suggest what to spin up or improve.