hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: Bonfire FEDERATE + Forgejo rootless (git :9024/:9200)

Browse source
This commit is contained in:
Hernâni Marques 2026-07-10 14:41:46 +02:00
parent b0efda7731
commit 40ec803464
No known key found for this signature in database
13 changed files with 422 additions and 123 deletions
Download patch file Download diff file Expand all files Collapse all files

36
host/overview/services.md
View file

@ -24,9 +24,15 @@ flowchart TB
FW["firewalld public\n9000,9001,80,8080,ssh"]
end
subgraph Podman["podman (hernani)"]
Merch["taler-hacktivism\n:9010 nginx TLS"]
Exch["taler-exchange-hacktivism\n:9011 exchange-httpd"]
subgraph Podman["podman rootless (hernani)"]
Merch["taler-hacktivism\n:9010"]
Exch["taler-exchange-hacktivism\n:9011"]
Bank["taler-bank-hacktivism\n:9012"]
Castopod["koopa-castopod\n:9020"]
Bonfire["koopa-bonfire\n:9021"]
Prime["koopa-prime jellyfin\n:9022"]
BT["qbittorrent\n:9023"]
Forgejo["koopa-forgejo ROOTLESS\n:9024 HTTP / :9200 SSH"]
end
Tor["tor ORPort :8080"]
@ -45,9 +51,12 @@ flowchart TB
CaddyHTTP -->|other| Redir[301 HTTPS]
CaddyHTTPS -->|taler.hacktivism.ch| Merch
CaddyHTTPS -->|exchange.hacktivism.ch| Exch
Merch --> MSock["unix merchant-http.sock"]
Exch --> EDB["postgresql + secmods"]
CaddyHTTPS -->|bank.hacktivism.ch| Bank
CaddyHTTPS -->|castopod.hacktivism.ch| Castopod
CaddyHTTPS -->|bonfire.hacktivism.ch| Bonfire
CaddyHTTPS -->|prime.hacktivism.ch| Prime
CaddyHTTPS -->|bt.hacktivism.ch| BT
CaddyHTTPS -->|git.hacktivism.ch| Forgejo
```
## Port table
@ -59,10 +68,19 @@ flowchart TB
| 443 | systemd socket | → 127.0.0.1:**9001** |
| 9000 | caddy | HTTP + ACME |
| 9001 | caddy | HTTPS vhosts |
| 9010 | podman pasta | **merchant** nginx |
| 9011 | podman pasta | **exchange** httpd |
| 9010 | podman | **merchant** nginx |
| 9011 | podman | **exchange** httpd |
| 9012 | podman | **bank** libeufin |
| 9020 | podman | **castopod** |
| 9021 | podman | **bonfire** |
| 9022 | podman | **jellyfin** (prime) |
| 9023 | podman | **qbittorrent** (bt) |
| **9024** | podman | **forgejo** HTTP → `git.hacktivism.ch` |
| **9200** | podman | **forgejo** git-SSH (host-direct) |
| 8080 | tor | ORPort |
Full port notes: `configs/ports.md`.
## Service index (details elsewhere)
| Service | Detail docs |
@ -72,6 +90,6 @@ flowchart TB
| systemd proxies | `host/systemd/` |
| Merchant container | `configs/taler-merchant/`, `scripts/taler-merchant/` |
| Exchange container | `configs/taler-exchange/`, `scripts/taler-exchange/` |
| **Forgejo rootless** | `configs/forgejo/`, `2026/2026-07-10--forgejo-rootless.md` |
| Tor monitoring scripts | `scripts/monitoring/` |
| VeciGate NAT | `../vecigate-admin-log/ip/firewall/nat/` |