diff --git a/04-service-catalog.md b/04-service-catalog.md
index 6d51f56..91894fc 100644
--- a/04-service-catalog.md
+++ b/04-service-catalog.md
@@ -43,9 +43,16 @@
 ### Security / Identity
 | Service | Image | Pulls | Stars | Updated | Placement | Notes |
 |---------|-------|-------|-------|---------|-----------|-------|
-| **Vaultwarden** | `vaultwarden/server` | 287.2M | 1,454 | 2026-05-17 | **Replicated (1)** | Any worker — persistent volume required |
 | **Authelia** | `authelia/authelia` | 75.2M | 208 | 2026-05-25 | **Replicated (1)** | Any worker — Traefik ForwardAuth middleware |
 
+### Existing External Services (NOT in Swarm)
+| Service | Location | Status | Notes |
+|---------|----------|--------|-------|
+| **Vaultwarden** | Neo (Nebuchadnezzar) | ✅ Production | Already deployed via Docker. Managed separately. |
+| **Nextcloud** | Neo (Nebuchadnezzar) | ✅ Production | Nextcloud AIO. NOT part of G9 Swarm stack. |
+
+> These services live outside the G9 Swarm cluster. No migration planned unless Bobby explicitly requests it.
+
 ### Media Stack (*arr + Jellyfin)
 | Service | Image | Pulls | Stars | Updated | Placement | Notes |
 |---------|-------|-------|-------|---------|-----------|-------|
@@ -54,11 +61,7 @@
 | **Radarr** | `linuxserver/radarr` | 2.36B | 1,791 | 2026-05-25 | **Replicated (1)** | Any worker — needs shared /downloads mount |
 | **Prowlarr** | `linuxserver/prowlarr` | 35.9M | 403 | 2026-05-25 | **Replicated (1)** | Any worker — feeds Sonarr/Radarr via network |
 
-### File / Collaboration
-| Service | Image | Pulls | Stars | Updated | Placement | Notes |
-|---------|-------|-------|-------|---------|-----------|-------|
-| **Nextcloud** | `nextcloud` | 1.01B | 4,485 | 2026-05-23 | **Replicated (1)** | Any worker — needs persistent volume + database |
-
-## Total Services: 18 (including global agents)
+## Total Services: 16 (catalog) + 3 (existing external) = 19 total fleet services
+## Swarm Services: 16 (includes global Beszel agent and node exporter)
 ## Total DockerHub Pulls (aggregate): ~16.0B
 ## All images updated within 90 days
diff --git a/homelab-services-stack-prd.md b/homelab-services-stack-prd.md
index 5bf45ea..afb7af5 100644
--- a/homelab-services-stack-prd.md
+++ b/homelab-services-stack-prd.md
@@ -138,9 +138,16 @@ This PRD is append-only for new services. Modifications to existing entries requ
 ### Security / Identity
 | Service | Image | Pulls | Stars | Updated | Placement | Notes |
 |---------|-------|-------|-------|---------|-----------|-------|
-| **Vaultwarden** | `vaultwarden/server` | 287.2M | 1,454 | 2026-05-17 | **Replicated (1)** | Any worker — persistent volume required |
 | **Authelia** | `authelia/authelia` | 75.2M | 208 | 2026-05-25 | **Replicated (1)** | Any worker — Traefik ForwardAuth middleware |
 
+### Existing External Services (NOT in Swarm)
+| Service | Location | Status | Notes |
+|---------|----------|--------|-------|
+| **Vaultwarden** | Neo (Nebuchadnezzar) | ✅ Production | Already deployed via Docker. Managed separately. |
+| **Nextcloud** | Neo (Nebuchadnezzar) | ✅ Production | Nextcloud AIO. NOT part of G9 Swarm stack. |
+
+> These services live outside the G9 Swarm cluster. No migration planned unless Bobby explicitly requests it.
+
 ### Media Stack (*arr + Jellyfin)
 | Service | Image | Pulls | Stars | Updated | Placement | Notes |
 |---------|-------|-------|-------|---------|-----------|-------|
@@ -149,12 +156,8 @@ This PRD is append-only for new services. Modifications to existing entries requ
 | **Radarr** | `linuxserver/radarr` | 2.36B | 1,791 | 2026-05-25 | **Replicated (1)** | Any worker — needs shared /downloads mount |
 | **Prowlarr** | `linuxserver/prowlarr` | 35.9M | 403 | 2026-05-25 | **Replicated (1)** | Any worker — feeds Sonarr/Radarr via network |
 
-### File / Collaboration
-| Service | Image | Pulls | Stars | Updated | Placement | Notes |
-|---------|-------|-------|-------|---------|-----------|-------|
-| **Nextcloud** | `nextcloud` | 1.01B | 4,485 | 2026-05-23 | **Replicated (1)** | Any worker — needs persistent volume + database |
-
-## Total Services: 18 (including global agents)
+## Total Services: 16 (catalog) + 3 (existing external) = 19 total fleet services
+## Swarm Services: 16 (includes global Beszel agent and node exporter)
 ## Total DockerHub Pulls (aggregate): ~16.0B
 ## All images updated within 90 days