docs: daylog 2026-09-25 qbittorrent bt-net + scripts/prime apply-koopa-bt-fix wrappers

This commit is contained in:
Hernâni Marques 2026-09-26 12:04:07 +02:00
parent e01fbedcd8
commit 08b1676b19
No known key found for this signature in database
7 changed files with 180 additions and 1 deletions

View file

@ -18,6 +18,7 @@ sudo firewall-cmd --list-ports
| 8080/tcp | Tor OR | — |
| 23235/tcp | (legacy list; host SSH is :22, WAN via VeciGate 23235→22) | — |
| **9200/tcp** | **Forgejo git-SSH** (podman rootlessport) | **OK** after add+reload |
| **6881/tcp+udp** | qBittorrent BT listen (`koopa-prime-qbittorrent`) | apply: `scripts/prime/apply-qbittorrent-bt-net.sh` |
### Not opened on purpose
@ -61,6 +62,7 @@ Forgejo advertises `SSH_PORT=9200`. Traffic hits **host:9200** (not Caddy). With
|------|--------|
| 2026-07-09 | 443/tcp re-added for IPv6 |
| 2026-07-10 | **9200/tcp** for Forgejo git-SSH (verified LAN + hairpin + SSH auth) |
| 2026-09-25 | **6881/tcp+udp** for qBittorrent BT (`scripts/prime/apply-qbittorrent-bt-net.sh`); VeciGate wan+hairpin DNAT live; WAN/LAN `nc` OK |
## Nym (`koopa-nym`, nym.com)

View file

@ -14,7 +14,8 @@
| 9020 | `koopa-castopod` → `castopod.hacktivism.ch` |
| 9021 | `koopa-bonfire` → `bonfire.hacktivism.ch` |
| 9022 | `koopa-prime` (Jellyfin) → `prime.hacktivism.ch` |
| 9023 | qBittorrent → `bt.hacktivism.ch` |
| 9023 | qBittorrent WebUI → `bt.hacktivism.ch` |
| **6881** | qBittorrent BT listen (tcp+udp; firewalld + VeciGate DNAT) |
| **9024** | `koopa-forgejo` (HTTP) → **`git.hacktivism.ch`** |
| **9025** | `koopa-paivana` → `paivana.hacktivism.ch` |
| **9026** | `koopa-lemmy-proxy` → `lemmy.hacktivism.ch` |

View file

@ -6,6 +6,7 @@
| Compose | `compose.yml` (this dir; **no secret values**) |
| Jellyfin | **9022** → Caddy `prime.hacktivism.ch` |
| qBittorrent | **9023** → Caddy `bt.hacktivism.ch` |
| BT listen | **6881** tcp+udp (firewalld + VeciGate DNAT); apply `scripts/prime/apply-qbittorrent-bt-net.sh` |
| Topic | `2026/2026-07-09--koopa-prime-jellyfin.md` |
`WEBUI_PASSWORD` is `${WEBUI_PASSWORD}` in the mirror — live value only in