docs: Bonfire FEDERATE + Forgejo rootless (git :9024/:9200)

2026/2026-07-10--bonfire-federate.md

@@ -0,0 +1,61 @@
+# Bonfire — FEDERATE + public guest access (2026-07-10)
+
+Follow-up to ground zero: `2026-07-09--bonfire-ground-zero.md`.
+
+## Change
+
+| Item | Before | After |
+|------|--------|--------|
+| `.env` `FEDERATE` | unset | **`true`** |
+| Container | recreated | `podman-compose up -d --force-recreate web` |
+| `printenv FEDERATE` (web) | — | `true` |
+| `HOSTNAME` / compose | `bonfire.hacktivism.ch` | unchanged |
+| Port | **9021** → Caddy | unchanged |
+
+Only new env key vs ground-zero `.env`: **`FEDERATE`**.
+
+Live: `/home/hernani/koopa-bonfire/.env` (mode 600).  
+Mirror: `koopa-admin-secrets/koopa/home-hernani/koopa-bonfire/.env`.  
+Compose mirror: `configs/bonfire/compose.yml`.
+
+## Intent
+
+- Allow federation-related runtime paths (`FEDERATE` consumed in Bonfire `runtime.exs` as `true|yes|1`).
+- Keep **guest-readable** public surfaces (no login required for explore / profiles that are already public).
+- Operator stance: **federation enablement is accepted as OK** even if the UI banner lags.
+
+## Observed behaviour (after recreate)
+
+| Check | Result |
+|-------|--------|
+| Local `http://127.0.0.1:9021/` | 200; guest UI (Explore / Log in) |
+| Guest UI banner | still may show **“Federation disabled”** |
+| App RPC (earlier probe) | `activity_pub` instance sometimes still `federating: false`, `hostname: "localhost"` despite env |
+| Public profile `@foss` | public posts still visible (gitbot / FOSS content) |
+| Front / local feed | can be sparse (“That’s all for the last 30 days…”) depending on boundaries / feed window |
+
+So: **env is set and container healthy**; full ActivityPub “federating=true” in Application config may still need admin UI / deeper config if outbound federation is required later. Not blocking public profile timelines for guests.
+
+## Ops
+
+```bash
+cd ~/koopa-bonfire
+grep ^FEDERATE= .env
+podman exec koopa-bonfire printenv FEDERATE HOSTNAME
+podman ps --filter name=koopa-bonfire
+curl -sS -o /dev/null -w "%{http_code}\n" http://127.0.0.1:9021/
+curl -sS -o /dev/null -w "%{http_code}\n" http://127.0.0.1:9021/@foss
+```
+
+Recreate web after env change:
+
+```bash
+cd ~/koopa-bonfire
+set -a && source .env && set +a
+podman-compose up -d --force-recreate web
+```
+
+## Secrets / log rules
+
+- Values only in **`koopa-admin-secrets`**, not in this repo.
+- Daylog major bullet only (see `2026-07-10.md`).