Redact all remaining IPv4 addresses, port numbers, and credential values
from RUNBOOK.md, AUTHENTIK.md, and authentik-sso-setup.md. Replace with
descriptive placeholders (<IP_REDACTED>, <port>, <REDACTED>, etc.).
Docker image version tags (postgres:16, forgejo:11, etc.) preserved.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Replace all production IPs (public, LAN, Tailscale), host port bindings,
and hardcoded passwords/secrets across RUNBOOK.md, docs/, and projects/
with descriptive placeholders (<KSCLOUD1_PUBLIC_IP>, <port>,
<KSCLOUD1_SUDO_PASSWORD>, etc.) so no sensitive infrastructure details
are committed to the repository.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Replaces the stub runbook with a comprehensive setup guide covering the
entire KiteStacks homelab from scratch — monk (primary host), kscloud1
(Hetzner cloud replica), Cloudflare Tunnel, Tailscale mesh, shared
Authentik Postgres+Redis, all 9 services with full compose configs,
Authentik SSO for every app, kscloud1 replica deployment, portal UI,
monitoring, Discord integration, and a full verification checklist.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>