docs+config: exchange-overrides.conf like merchant; drop zz- files

configs/taler-exchange/README.md

@@ -1,3 +1,38 @@
-# taler-exchange
+# Exchange (GOA) site notes
 
-Separate container tried; reverted — conf.d only.
+Container: **`taler-exchange-hacktivism`** · image tags `localhost/taler-exchange-hacktivism-live:9011` (live) and optional snapshot  
+Host port: **9011** (pasta) · public: **https://exchange.hacktivism.ch/** (Caddy → 9011)
+
+**Snapshot + restore (local tar, no registry):**  
+→ [`2026/2026-07-09--exchange-snapshot-and-restore.md`](../../2026/2026-07-09--exchange-snapshot-and-restore.md)
+
+## Terms of service (wallets)
+
+Wallets require a working `/terms` (and usually `/privacy`) with a
+`Taler-Terms-Version` header. If missing, many apps hang on accept /
+`isPending` during the first withdraw QR.
+
+This site uses **minimal stubs** — no formal legal ToS:
+
+| Config | Value |
+|--------|--------|
+| `TERMS_ETAG` | `no-terms-v0` |
+| `PRIVACY_ETAG` | `no-privacy-v0` |
+| files | `/var/lib/taler-exchange/terms/en/no-terms-v0.{html,txt,md}` etc. |
+
+Install / refresh inside the exchange container as root:
+
+```bash
+/usr/local/bin/install_no_terms.sh
+# ensure exchange-overrides.conf has TERMS_ETAG / PRIVACY_ETAG (see above)
+runuser -u taler-exchange-httpd -- /usr/local/bin/start_exchange.sh --restart
+curl -sS -D- http://127.0.0.1:9011/terms | head
+```
+
+Sources: `configs/taler-exchange/terms-src/` and
+`scripts/taler-exchange/install_no_terms.sh`.
+
+## Secrets
+
+`ATTRIBUTE_ENCRYPTION_KEY` and wire/DB credentials are **not** in this tree.  
+See repo-root `SECRETS.md` and `koopa-admin-secrets/containers/taler-exchange/secrets/`.

configs/taler-exchange/conf.d-exchange-coins.conf

@@ -0,0 +1,331 @@
+# GOA denominations for exchange.hacktivism.ch
+# Units: 1 GOA = 1000 mGOA = 1_000_000 uGOA
+# VALUE uses base currency; coin sections cover 1–2–5 ladders at u/m/whole scale.
+
+# --- uGOA (10^-6 GOA) ---
+[coin_goa_0_000001]
+VALUE = GOA:0.000001
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_0_000002]
+VALUE = GOA:0.000002
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_0_000005]
+VALUE = GOA:0.000005
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_0_00001]
+VALUE = GOA:0.00001
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_0_00002]
+VALUE = GOA:0.00002
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_0_00005]
+VALUE = GOA:0.00005
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_0_0001]
+VALUE = GOA:0.0001
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_0_0002]
+VALUE = GOA:0.0002
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_0_0005]
+VALUE = GOA:0.0005
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+# --- mGOA (10^-3 GOA) ---
+[coin_goa_0_001]
+VALUE = GOA:0.001
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_0_002]
+VALUE = GOA:0.002
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_0_005]
+VALUE = GOA:0.005
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_0_01]
+VALUE = GOA:0.01
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_0_02]
+VALUE = GOA:0.02
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_0_05]
+VALUE = GOA:0.05
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_0_1]
+VALUE = GOA:0.1
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_0_2]
+VALUE = GOA:0.2
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_0_5]
+VALUE = GOA:0.5
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+# --- whole GOA ---
+[coin_goa_1_0]
+VALUE = GOA:1
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_2_0]
+VALUE = GOA:2
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_5_0]
+VALUE = GOA:5
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_10_0]
+VALUE = GOA:10
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+# --- large whole GOA (align with common_amounts 20…1000) ---
+[coin_goa_20_0]
+VALUE = GOA:20
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_50_0]
+VALUE = GOA:50
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_100_0]
+VALUE = GOA:100
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_200_0]
+VALUE = GOA:200
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[coin_goa_1000_0]
+VALUE = GOA:1000
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 3 years
+FEE_WITHDRAW = GOA:0
+FEE_DEPOSIT = GOA:0
+FEE_REFRESH = GOA:0
+FEE_REFUND = GOA:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA

configs/taler-exchange/exchange-overrides.conf

@@ -0,0 +1,52 @@
+# Manual site overrides for exchange.hacktivism.ch (GOA exploration currency).
+# Same role as /etc/taler-merchant/merchant-overrides.conf on taler-hacktivism.
+# Do not edit overrides.conf (tooling). Do not edit package conf.d defaults.
+# No conf.d/zz-* drop-ins.
+
+[exchange]
+CURRENCY = GOA
+CURRENCY_ROUND_UNIT = GOA:0.00000001
+TINY_AMOUNT = GOA:0.00000001
+DEFAULT_P2P_EXPIRATION = 14 days
+BASE_URL = https://exchange.hacktivism.ch/
+SERVE = tcp
+PORT = 9011
+MASTER_PUBLIC_KEY = TW6K5FXF81VYCAH0YWYX0SX98KBBSJ42VX27WAX01FTFH400QG10
+# Secret: ATTRIBUTE_ENCRYPTION_KEY — not in this repo.
+# Live: /etc/taler-exchange/secrets/exchange-attribute-encryption.secret.conf
+# Mirror: sibling koopa-admin-secrets/containers/taler-exchange/secrets/
+@inline-secret@ exchange-attribute-encryption ../secrets/exchange-attribute-encryption.secret.conf
+
+# Wallet ToS/PP: short "No Terms Required" stubs (install via install_no_terms.sh).
+# Without this, /terms returns 501 "not configured" and apps hang on accept/isPending.
+# HTML uses same dark palette as merchant dual-currency terms (bump etag to refresh cache).
+TERMS_DIR = ${TALER_DATA_HOME}terms/
+TERMS_ETAG = no-terms-v2
+PRIVACY_DIR = ${TALER_DATA_HOME}terms/
+PRIVACY_ETAG = exchange-pp-swiss-v0
+
+[currency-goa]
+ENABLED = YES
+name = "GOA exploration currency"
+code = GOA
+# SI display units. taler-exchange rejects scale keys outside [-8, 24] (no Ronna/Quetta).
+fractional_input_digits = 8
+fractional_normal_digits = 0
+fractional_trailing_zero_digits = 0
+alt_unit_names_are_symbols = NO
+alt_unit_names = {"24":"Yotta-GOA","21":"Zetta-GOA","18":"Exa-GOA","15":"Peta-GOA","12":"Tera-GOA","9":"Giga-GOA","6":"Mega-GOA","3":"Kilo-GOA","0":"GOA","-1":"Deci-GOA","-2":"Centi-GOA","-3":"Milli-GOA","-6":"Micro-GOA","-7":"Deci-Micro-GOA","-8":"Atomic-GOA"}
+common_amounts = "GOA:10 GOA:20 GOA:50 GOA:100 GOA:200 GOA:1000"
+
+### Disable package demonstrator currencies (like merchant-overrides)
+[currency-kudos]
+ENABLED = NO
+
+[currency-testkudos]
+ENABLED = NO
+
+### Regional bank (libeufin, x-taler-bank) — no IBAN
+[exchange-account-1]
+PAYTO_URI = payto://x-taler-bank/bank.hacktivism.ch/exchange?receiver-name=GOA%20Exchange
+ENABLE_CREDIT = YES
+ENABLE_DEBIT = YES
+@inline-secret@ exchange-accountcredentials-1 ../secrets/exchange-accountcredentials-1.secret.conf

configs/taler-exchange/zz-hacktivism.conf

@@ -1,2 +0,0 @@
-[exchange]
-CURRENCY = GOA