# Bonfire — FEDERATE + public guest access (2026-07-10)

Follow-up to ground zero: `2026-07-09--bonfire-ground-zero.md`.

## Change

| Item | Before | After |
|------|--------|--------|
| `.env` `FEDERATE` | unset | **`true`** |
| Container | recreated | `podman-compose up -d --force-recreate web` |
| `printenv FEDERATE` (web) | — | `true` |
| `HOSTNAME` / compose | `bonfire.hacktivism.ch` | unchanged |
| Port | **9021** → Caddy | unchanged |

Only new env key vs ground-zero `.env`: **`FEDERATE`**.

Live: `/home/hernani/koopa-bonfire/.env` (mode 600).  
Mirror: `koopa-admin-secrets/koopa/home-hernani/koopa-bonfire/.env`.  
Compose mirror: `configs/bonfire/compose.yml`.

## Intent

- Allow federation-related runtime paths (`FEDERATE` consumed in Bonfire `runtime.exs` as `true|yes|1`).
- Keep **guest-readable** public surfaces (no login required for explore / profiles that are already public).
- Operator stance: **federation enablement is accepted as OK** even if the UI banner lags.

## Observed behaviour (after recreate)

| Check | Result |
|-------|--------|
| Local `http://127.0.0.1:9021/` | 200; guest UI (Explore / Log in) |
| Guest UI banner | still may show **“Federation disabled”** |
| App RPC (earlier probe) | `activity_pub` instance sometimes still `federating: false`, `hostname: "localhost"` despite env |
| Public profiles | guest-readable when already public |
| Front / local feed | can be sparse depending on boundaries / feed window |

So: **env is set and container healthy**; full ActivityPub “federating=true” in Application config may still need admin UI / deeper config if outbound federation is required later.

## Ops

```bash
cd ~/koopa-bonfire
grep ^FEDERATE= .env
podman exec koopa-bonfire printenv FEDERATE HOSTNAME
podman ps --filter name=koopa-bonfire
curl -sS -o /dev/null -w "%{http_code}\n" http://127.0.0.1:9021/
```

Recreate web after env change:

```bash
cd ~/koopa-bonfire
set -a && source .env && set +a
podman-compose up -d --force-recreate web
```

## Secrets / log rules

- Values only in **`koopa-admin-secrets`**, not in this repo.
- Daylog major bullet only (see `2026-07-10.md`).
