From 49740321889ab61be663df64a47c3e1bcb8b1e22 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Hern=C3=A2ni=20Marques?= Date: Sat, 19 Sep 2026 01:38:51 +0200 Subject: [PATCH] docs: ports + koopa-setup goa-regio-ng pasta map --- configs/ports.md | 72 +++++++++++++++++++++++------------------------- koopa-setup | 10 +++++-- 2 files changed, 42 insertions(+), 40 deletions(-) diff --git a/configs/ports.md b/configs/ports.md index 36ccd88..70288db 100644 --- a/configs/ports.md +++ b/configs/ports.md @@ -1,4 +1,4 @@ -# Port map (see also host/overview/services.md) +# Port map (koopa) | Port | Role | |------|------| @@ -7,45 +7,43 @@ | 443 | systemd `https-proxy.socket` → Caddy **9001** | | 9000 | Caddy HTTP + ACME webroot | | 9001 | Caddy HTTPS (vhosts) | -| 9010 | podman `taler-hacktivism` (merchant) | -| 9011 | podman **`taler-hacktivism-exchange-ansible`** (exchange) | -| 9012 | podman `taler-hacktivism-bank` (libeufin-bank) | -| 9013–9015 | bank / exchange / merchant public landings | -| 9020 | podman `koopa-castopod` → Caddy `castopod.hacktivism.ch` | -| 9021 | podman `koopa-bonfire` → Caddy `bonfire.hacktivism.ch` | -| 9022 | podman `koopa-prime` (Jellyfin) → Caddy `prime.hacktivism.ch` | -| 9023 | podman qBittorrent → Caddy `bt.hacktivism.ch` | -| **9024** | podman **`koopa-forgejo`** (HTTP) → Caddy **`git.hacktivism.ch`** | -| **9025** | podman **`koopa-paivana`** (portal paywall) → Caddy **`paivana.hacktivism.ch`** | -| **9026** | podman **`koopa-lemmy-proxy`** → Caddy **`lemmy.hacktivism.ch`** | -| **9027** | podman **`koopa-decidim`** → Caddy **`decidim.hacktivism.ch`** | -| **9028** | podman **`koopa-paivana-silverbullet`** → Caddy **`silverbullet.hacktivism.ch`** (app backend `172.17.0.1:19128`) | -| **9029** | podman **`koopa-paivana-galene`** → Caddy **`galene.hacktivism.ch`** (app backend `172.17.0.1:19129`; UDP 10000–10099 still Galene) | -| **9030** | podman **`koopa-paivana-cryptpad`** → Caddy **`cryptpad.hacktivism.ch`** (edge backend `172.17.0.1:19130`) | -| **9031** | podman **`koopa-paivana-meet`** → Caddy **`meet.hacktivism.ch`** (app backend `172.17.0.1:19131`) | -| **9032** | podman **`koopa-bbb-front`** (Ubuntu) → Caddy **`bbb.hacktivism.ch`** | -| **9200** | podman **Forgejo git-SSH** (host-direct; not Caddy) | -| 9090–9092 | podman `koopa-tops-ng1` … `ng3` → Caddy `tops.ng{1,2,3}.hacktivism.ch` | -| 8080 | Tor ORPort | +| **9010** | `goa-regio-ng` merchant API (HTTPS in CTR) | +| **9011** | `goa-regio-ng` exchange | +| **9012** | `goa-regio-ng` libeufin-bank | +| **9013–9015** | bank / exchange / merchant public landings (host nginx) | +| 9020 | `koopa-castopod` → `castopod.hacktivism.ch` | +| 9021 | `koopa-bonfire` → `bonfire.hacktivism.ch` | +| 9022 | `koopa-prime` (Jellyfin) → `prime.hacktivism.ch` | +| 9023 | qBittorrent → `bt.hacktivism.ch` | +| **9024** | `koopa-forgejo` (HTTP) → **`git.hacktivism.ch`** | +| **9025** | `koopa-paivana` → `paivana.hacktivism.ch` | +| **9026** | `koopa-lemmy-proxy` → `lemmy.hacktivism.ch` | +| **9027** | `koopa-decidim` → `decidim.hacktivism.ch` | +| **9028** | `koopa-paivana-silverbullet` → `silverbullet.hacktivism.ch` | +| **9029** | `koopa-paivana-galene` → `galene.hacktivism.ch` | +| **9030** | `koopa-paivana-cryptpad` → `cryptpad.hacktivism.ch` | +| **9031** | `koopa-paivana-meet` → `meet.hacktivism.ch` | +| **9032** | `koopa-bbb-front` → `bbb.hacktivism.ch` | +| **9200** | Forgejo git-SSH (host-direct; not Caddy) | +| 9090–9092 | `koopa-tops-ng1`…`ng3` → `tops.ng{1,2,3}.hacktivism.ch` | +| **8080** | host `tor.service` ORPort | +| **9051** | host Tor ControlPort (loopback) | VeciGate: WAN **80→9000**, WAN **443→9001**. -Public apps: Caddy vhosts on **9001** → 127.0.0.1:{9010–9015, 9020–9032, 9090–9092}. -Git SSH needs separate NAT/firewall **9200/tcp** if exposed to WAN. -Meet/Galene/BBB media UDP is separate from these HTTP ports. +Public apps: Caddy on **9001** → 127.0.0.1:{9010–9015, 9020–9032, 9090–9092}. +Git SSH needs **9200/tcp** if exposed to WAN. | UDP range | Role | |-----------|------| -| **10000–10099/udp** | **Galene** WebRTC (host publish + planned VeciGate DNAT → koopa) | -| (TBD) | Meet JVB / BBB media — allocate when Phase‑2 / full BBB leaves park | +| **10000–10099/udp** | Galene WebRTC | -| **1789** | podman **`koopa-nym`** mixnet (nym.com nym-node) | -| **1790** | podman **`koopa-nym`** verloc | -| **9080** | podman **`koopa-nym`** HTTP API (mapped from container 8080; Tor keeps **8080**) | -| **9180** | lab **`goa-regio-ng`** HTTP (loopback only; see `configs/lab-local/`) | -| **9322** | lab **`goa-regio-ng`** SSH/ansible (loopback only) | -| **8288** | lab **`mytops-local`** HTTP (loopback only) | -| **19000** | optional nym entry WS (gateway mode) | -| **51822/udp** | optional nym WireGuard (dVPN path) | -| **9180** | lab **`goa-regio-ng`** HTTP (loopback only; see `configs/lab-local/`) | -| **9322** | lab **`goa-regio-ng`** SSH/ansible (loopback only) | -| **8288** | lab **`mytops-local`** HTTP (loopback only) | +| Extra | Role | +|-------|------| +| **1789** | `koopa-nym` mixnet | +| **1790** | `koopa-nym` verloc | +| **9080** | `koopa-nym` HTTP API | +| **9180** | lab `goa-regio-ng` HTTP (loopback; `configs/lab-local/`) | +| **9322** | lab `goa-regio-ng` SSH/ansible (loopback) | +| **8288** | lab `mytops-local` HTTP (loopback) | + +login-health inventory: `scripts/login-health/koopa-login-health.sh`. diff --git a/koopa-setup b/koopa-setup index 0a18930..7d1832e 100644 --- a/koopa-setup +++ b/koopa-setup @@ -14,14 +14,18 @@ configs/ports.md 2026/2026-09-04--mytops-local-podman.md # outward: ~/git/mytops-admin-log → git switch mytops-local -## goa-regio-ng +## goa-regio-ng (live GOA on koopa) +# single CTR goa-regio-ng · pasta 9010–9015 · landings host-side +# SoT: scripts/taler-shared/goa-regio-ng/ · bak ~/backups/goa/current 2026/2026-09-04--goa-backup-regio-ng.md -# outward: ~/src/regio-local/ +configs/ports.md +scripts/login-health/ ## host map -host/overview/ +configs/ports.md configs/caddy/ +host/tor/README.md SECRETS.md ISSUES.md