diff --git a/ansible/host_vars/turnstile/vars b/ansible/host_vars/guest-relations/vars
similarity index 87%
rename from ansible/host_vars/turnstile/vars
rename to ansible/host_vars/guest-relations/vars
index d20da8c..c51e975 100644
--- a/ansible/host_vars/turnstile/vars
+++ b/ansible/host_vars/guest-relations/vars
@@ -1,6 +1,6 @@
 ---
-# file: host_vars/turnstile/vars
-# turnstile — Authentik Identity Provider / SSO
+# file: host_vars/guest-relations/vars
+# guest-relations — Guest Relations
 # VM provisioned by Terraform (pre-pipeline bootstrap)
 
 # ─── Network ─────────────────────────────────────────────────────────────────
diff --git a/ansible/inventory.yml b/ansible/inventory.yml
index 9818f95..0bc80a2 100755
--- a/ansible/inventory.yml
+++ b/ansible/inventory.yml
@@ -30,7 +30,7 @@ load_balancers:
 
 authentik_server:
   hosts:
-    turnstile:
+    guest-relations:
       ansible_host: 10.1.71.40
       ansible_become: true
 
diff --git a/ansible/playbooks/deploy_authentik.yml b/ansible/playbooks/deploy_authentik.yml
index 45801fb..fca2880 100644
--- a/ansible/playbooks/deploy_authentik.yml
+++ b/ansible/playbooks/deploy_authentik.yml
@@ -1,7 +1,7 @@
 ---
 # ------------------------------------------------------------------------------
 # FILE: playbooks/deploy_authentik.yml
-# DESCRIPTION: Deploys Authentik identity provider on turnstile.
+# DESCRIPTION: Deploys Authentik identity provider on guest-relations.
 #              Installs Docker and configures Authentik with PostgreSQL and Redis.
 #
 # USAGE:
diff --git a/docs/decisions/Homelab_Technical_Decision_Points.md b/docs/decisions/Homelab_Technical_Decision_Points.md
index 5b05459..99c705a 100644
--- a/docs/decisions/Homelab_Technical_Decision_Points.md
+++ b/docs/decisions/Homelab_Technical_Decision_Points.md
@@ -133,7 +133,7 @@
 Services previously hosted here have been migrated:
 
 - Authoritative DNS → `monorail` (Technitium LXC)
-- Identity Management → `turnstile` (Authentik VM)
+- Identity Management → `guest-relations` (Authentik VM)
 - Automation (Ansible) → `imagineering` (Semaphore VM)
 - Infrastructure as Code (Terraform) → `city-hall` (VM)
 - iPXE (Matchbox) → TBD
@@ -215,7 +215,7 @@ This table serves as the single source of truth for all statically assigned host
 | `imagineering` | `10.1.71.37` | Automation Server (Ansible) | Semaphore | — | VM | 
 | `city-hall` | `10.1.71.38` | Infrastructure as Code | Terraform / Boilerplates CLI | — | VM | 
 | `timekeeper` | `10.1.71.39` | Backup & Recovery | Proxmox Backup Server | — | VM | 
-| `turnstile` | `10.1.71.40` | Identity Provider / SSO | Authentik | — | VM (Docker Compose / Boilerplates) | 
+| `guest-relations` | `10.1.71.40` | Identity Provider / SSO | Authentik | — | VM (Docker Compose / Boilerplates) | 
 | `cinderella-castle` | `10.1.71.41` | Monitoring & Observability | Prometheus / Grafana | — | VM | 
 
 #### Container Orchestration (`10.1.71.64/26`)
@@ -260,7 +260,7 @@ The core physical hardware will be named after the foundational "lands" and infr
 |---|---|---|
 | **Authoritative DNS** | `monorail` | The primary, official transportation system, authoritative for all park routes. | 
 | **Automation Server** | `imagineering` | The engineering division that designs and builds everything in the park. | 
-| **Identity Provider / SSO** | `turnstile` | The authentication gate — you can't enter the Magic Kingdom without passing through it. | 
+| **Identity Provider / SSO** | `guest-relations` | The authentication gate — you can't enter the Magic Kingdom without passing through it. | 
 | **Reverse Proxy / Load Balancer** | `lightning-lane` | The fast-track system that routes guests efficiently to their destination. | 
 | **Workflow Orchestration** | `tiki-room` | The enchanted show where everything is automated and orchestrated in harmony. | 
 | **Infrastructure as Code** | `city-hall` | The administrative headquarters where all park operations are planned and managed. | 
@@ -493,5 +493,5 @@ These hostnames have been assigned to active services and are documented here fo
 | Service Category | Assigned Name | Assigned To | 
 |---|---|---|
 | **NAS** | `emporium` | Synology 1621+ (`10.1.71.9`) | 
-| **Identity Provider / SSO** | `turnstile` | Authentik (`10.1.71.40`) | 
+| **Identity Provider / SSO** | `guest-relations` | Authentik (`10.1.71.40`) | 
 
diff --git a/terraform/proxmox/hosts/tfvars/turnstile.tfvars b/terraform/proxmox/hosts/tfvars/guest-relations.tfvars
similarity index 67%
rename from terraform/proxmox/hosts/tfvars/turnstile.tfvars
rename to terraform/proxmox/hosts/tfvars/guest-relations.tfvars
index 369b33b..08cff6a 100644
--- a/terraform/proxmox/hosts/tfvars/turnstile.tfvars
+++ b/terraform/proxmox/hosts/tfvars/guest-relations.tfvars
@@ -1,16 +1,16 @@
-# ─── turnstile ───────────────────────────────────────────────────────────────
+# ─── guest-relations ───────────────────────────────────────────────────────────────
 # Authentik Identity Provider / SSO
 # Provisioned manually (pre-pipeline bootstrap — NetBox not yet available)
 #
 # Apply:
 #   cd terraform/proxmox/hosts
 #   terraform apply \
-#     -var-file="tfvars/turnstile.tfvars" \
-#     -state="states/turnstile.tfstate" \
+#     -var-file="tfvars/guest-relations.tfvars" \
+#     -state="states/guest-relations.tfstate" \
 #     -var="proxmox_api_url=https://main-street-usa.local.mk-labs.cloud:8006" \
-#     -var="proxmox_api_token=terraform@pve!automation=<token>"
+#     -var="proxmox_api_token=terraform@pve!terraform-token=<token>"
 
-hostname      = "turnstile"
+hostname      = "guest-relations"
 vm_id         = 71040
 ip_address    = "10.1.71.40"
 target_node   = "main-street-usa"