From 17f25d41c9815e5727f659ea6f3f9cb3726fa6e8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Hern=C3=A2ni=20Marques?= Date: Fri, 17 Jul 2026 20:06:16 +0200 Subject: [PATCH] docs(paivana): disable racey upstream unit; smoke expects 302/402 Compose unit starts both containers; standalone upstream podman-start raced at boot (exit 125). Live stack already healthy on hacktivism. --- configs/paivana/README.md | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) diff --git a/configs/paivana/README.md b/configs/paivana/README.md index e813a82..3b8700a 100644 --- a/configs/paivana/README.md +++ b/configs/paivana/README.md @@ -48,15 +48,31 @@ podman logs -f koopa-paivana curl -si http://127.0.0.1:9025/ | head # 302 → /.well-known/paivana/templates/paivana#… ``` -Autostart: +Autostart (**only** the compose unit — starts **both** `koopa-paivana` and +`koopa-paivana-upstream`): ```bash mkdir -p ~/.config/systemd/user cp ~/koopa-paivana/container-koopa-paivana.service ~/.config/systemd/user/ +# optional: After= merchant (configs/systemd/user/container-koopa-paivana.service.d/) systemctl --user daemon-reload systemctl --user enable --now container-koopa-paivana.service ``` +**Do not** enable a separate `container-koopa-paivana-upstream.service` that only +runs `podman start koopa-paivana-upstream`. At boot that unit races compose +(container not created yet → exit 125 → start-limit-hit). Compose already +starts the upstream. If such a unit exists: +`systemctl --user disable --now container-koopa-paivana-upstream.service`. + +Healthy smoke: + +| Check | Expect | +|-------|--------| +| `curl -si http://127.0.0.1:9025/` | **302** → `/.well-known/paivana/templates/paivana#…` | +| template URL / public `https://paivana.hacktivism.ch/` | **402** paywall HTML + `paivana: taler://pay-template/…` | +| monitoring | `./scripts/taler-monitoring/taler-monitoring.sh -d hacktivism.ch urls` → `www.paivana` OK | + ## Network notes Rootless pasta cannot hairpin public DNS for the merchant. Compose sets: