hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: firewalld 9200 + VeciGate path for Forgejo git-SSH

Browse source
This commit is contained in:
Hernâni Marques 2026-07-10 14:44:31 +02:00
parent 8ebcd90111
commit 0c7d96b584
No known key found for this signature in database
4 changed files with 52 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

9
2026/2026-07-10--admin-log-origin-forgejo.md
View file

@ -29,3 +29,12 @@ Credentials: `koopa-admin-secrets/…/koopa-forgejo/users.env` — not in this r
- Forgejo install: `2026-07-10--forgejo-rootless.md`
- Secrets sibling: **not** hosted here (private material stays in `koopa-admin-secrets` only)
## Network (SSH :9200)
Public git-SSH requires:
1. VeciGate WAN/hairpin + IPv6 forward **9200** → koopa
2. koopa firewalld **9200/tcp**
See `2026-07-10--forgejo-rootless.md` (Network exposure) and `../vecigate-admin-log/docs/CHANGELOG.md`.

21
2026/2026-07-10--forgejo-rootless.md
View file

@ -62,8 +62,27 @@ sudo caddy validate --config /etc/caddy/Caddyfile
sudo systemctl reload caddy
```
## Network exposure (2026-07-10)
| Layer | Rule |
|-------|------|
| **VeciGate IPv4** | WAN **9200** → `192.168.100.95:9200`; hairpin LAN/LAN2 → public A:9200 |
| **VeciGate IPv6** | WAN→LAN forward **tcp/9200** |
| **koopa firewalld** | `public` **9200/tcp** |
Docs: `../vecigate-admin-log` (`ip/firewall/nat/`, `ipv6/firewall/filter/`, `docs/CHANGELOG.md`);
host ports: `configs/firewalld/public-ports.md`.
```bash
# host
sudo firewall-cmd --permanent --add-port=9200/tcp && sudo firewall-cmd --reload
# client
ssh -p 9200 -T git@git.hacktivism.ch
```
## Notes
- DNS: `git.hacktivism.ch` → koopa (same family as other `*.hacktivism.ch`).
- Git over SSH: `ssh://git@git.hacktivism.ch:9200/…` (open **9200**/tcp on firewall/router if WAN access needed).
- Git over SSH: `ssh://git@git.hacktivism.ch:9200/…`
- Clone URLs advertise `SSH_PORT=9200`; container still listens on internal **2222**.
- Admin-log origin: `hernani/koopa-admin-log` on this Forgejo — see `2026-07-10--admin-log-origin-forgejo.md`.

2
2026/2026-07-10.md
View file

@ -7,5 +7,7 @@
→ topic: `2026-07-10--bonfire-federate.md`; secrets: `koopa-admin-secrets/…/koopa-bonfire/`
- **Forgejo rootless** on `git.hacktivism.ch` (HTTP **9024**, git-SSH **9200**); no free registration; admin `hernani`
→ topic: `2026-07-10--forgejo-rootless.md`; secrets: `koopa-admin-secrets/…/koopa-forgejo/`
- **git-SSH :9200** exposed: VeciGate DNAT/hairpin + IPv6 forward; koopa firewalld **9200/tcp**
→ vecigate-admin-log CHANGELOG 2026-07-10; `configs/firewalld/public-ports.md`
- **admin-log origin** → Forgejo `hernani/koopa-admin-log` on git.hacktivism.ch (public; SSH :9200)
→ topic: `2026-07-10--admin-log-origin-forgejo.md`