hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: ports + koopa-setup goa-regio-ng pasta map

Browse source
This commit is contained in:
Hernâni Marques 2026-09-19 01:38:51 +02:00
parent 82879637b6
commit 4974032188
No known key found for this signature in database
2 changed files with 42 additions and 40 deletions
Download patch file Download diff file Expand all files Collapse all files

72
configs/ports.md
View file

@ -1,4 +1,4 @@
# Port map (see also host/overview/services.md)
# Port map (koopa)
| Port | Role |
|------|------|
@ -7,45 +7,43 @@
| 443 | systemd `https-proxy.socket` → Caddy **9001** |
| 9000 | Caddy HTTP + ACME webroot |
| 9001 | Caddy HTTPS (vhosts) |
| 9010 | podman `taler-hacktivism` (merchant) |
| 9011 | podman **`taler-hacktivism-exchange-ansible`** (exchange) |
| 9012 | podman `taler-hacktivism-bank` (libeufin-bank) |
| 9013–9015 | bank / exchange / merchant public landings |
| 9020 | podman `koopa-castopod` → Caddy `castopod.hacktivism.ch` |
| 9021 | podman `koopa-bonfire` → Caddy `bonfire.hacktivism.ch` |
| 9022 | podman `koopa-prime` (Jellyfin) → Caddy `prime.hacktivism.ch` |
| 9023 | podman qBittorrent → Caddy `bt.hacktivism.ch` |
| **9024** | podman **`koopa-forgejo`** (HTTP) → Caddy **`git.hacktivism.ch`** |
| **9025** | podman **`koopa-paivana`** (portal paywall) → Caddy **`paivana.hacktivism.ch`** |
| **9026** | podman **`koopa-lemmy-proxy`** → Caddy **`lemmy.hacktivism.ch`** |
| **9027** | podman **`koopa-decidim`** → Caddy **`decidim.hacktivism.ch`** |
| **9028** | podman **`koopa-paivana-silverbullet`** → Caddy **`silverbullet.hacktivism.ch`** (app backend `172.17.0.1:19128`) |
| **9029** | podman **`koopa-paivana-galene`** → Caddy **`galene.hacktivism.ch`** (app backend `172.17.0.1:19129`; UDP 10000–10099 still Galene) |
| **9030** | podman **`koopa-paivana-cryptpad`** → Caddy **`cryptpad.hacktivism.ch`** (edge backend `172.17.0.1:19130`) |
| **9031** | podman **`koopa-paivana-meet`** → Caddy **`meet.hacktivism.ch`** (app backend `172.17.0.1:19131`) |
| **9032** | podman **`koopa-bbb-front`** (Ubuntu) → Caddy **`bbb.hacktivism.ch`** |
| **9200** | podman **Forgejo git-SSH** (host-direct; not Caddy) |
| 9090–9092 | podman `koopa-tops-ng1` … `ng3` → Caddy `tops.ng{1,2,3}.hacktivism.ch` |
| 8080 | Tor ORPort |
| **9010** | `goa-regio-ng` merchant API (HTTPS in CTR) |
| **9011** | `goa-regio-ng` exchange |
| **9012** | `goa-regio-ng` libeufin-bank |
| **9013–9015** | bank / exchange / merchant public landings (host nginx) |
| 9020 | `koopa-castopod` → `castopod.hacktivism.ch` |
| 9021 | `koopa-bonfire` → `bonfire.hacktivism.ch` |
| 9022 | `koopa-prime` (Jellyfin) → `prime.hacktivism.ch` |
| 9023 | qBittorrent → `bt.hacktivism.ch` |
| **9024** | `koopa-forgejo` (HTTP) → **`git.hacktivism.ch`** |
| **9025** | `koopa-paivana` → `paivana.hacktivism.ch` |
| **9026** | `koopa-lemmy-proxy` → `lemmy.hacktivism.ch` |
| **9027** | `koopa-decidim` → `decidim.hacktivism.ch` |
| **9028** | `koopa-paivana-silverbullet` → `silverbullet.hacktivism.ch` |
| **9029** | `koopa-paivana-galene` → `galene.hacktivism.ch` |
| **9030** | `koopa-paivana-cryptpad` → `cryptpad.hacktivism.ch` |
| **9031** | `koopa-paivana-meet` → `meet.hacktivism.ch` |
| **9032** | `koopa-bbb-front` → `bbb.hacktivism.ch` |
| **9200** | Forgejo git-SSH (host-direct; not Caddy) |
| 9090–9092 | `koopa-tops-ng1`…`ng3` → `tops.ng{1,2,3}.hacktivism.ch` |
| **8080** | host `tor.service` ORPort |
| **9051** | host Tor ControlPort (loopback) |
VeciGate: WAN **80→9000**, WAN **443→9001**.
Public apps: Caddy vhosts on **9001** → 127.0.0.1:{9010–9015, 9020–9032, 9090–9092}.
Git SSH needs separate NAT/firewall **9200/tcp** if exposed to WAN.
Meet/Galene/BBB media UDP is separate from these HTTP ports.
Public apps: Caddy on **9001** → 127.0.0.1:{9010–9015, 9020–9032, 9090–9092}.
Git SSH needs **9200/tcp** if exposed to WAN.
| UDP range | Role |
|-----------|------|
| **10000–10099/udp** | **Galene** WebRTC (host publish + planned VeciGate DNAT → koopa) |
| (TBD) | Meet JVB / BBB media — allocate when Phase‑2 / full BBB leaves park |
| **10000–10099/udp** | Galene WebRTC |
| **1789** | podman **`koopa-nym`** mixnet (nym.com nym-node) |
| **1790** | podman **`koopa-nym`** verloc |
| **9080** | podman **`koopa-nym`** HTTP API (mapped from container 8080; Tor keeps **8080**) |
| **9180** | lab **`goa-regio-ng`** HTTP (loopback only; see `configs/lab-local/`) |
| **9322** | lab **`goa-regio-ng`** SSH/ansible (loopback only) |
| **8288** | lab **`mytops-local`** HTTP (loopback only) |
| **19000** | optional nym entry WS (gateway mode) |
| **51822/udp** | optional nym WireGuard (dVPN path) |
| **9180** | lab **`goa-regio-ng`** HTTP (loopback only; see `configs/lab-local/`) |
| **9322** | lab **`goa-regio-ng`** SSH/ansible (loopback only) |
| **8288** | lab **`mytops-local`** HTTP (loopback only) |
| Extra | Role |
|-------|------|
| **1789** | `koopa-nym` mixnet |
| **1790** | `koopa-nym` verloc |
| **9080** | `koopa-nym` HTTP API |
| **9180** | lab `goa-regio-ng` HTTP (loopback; `configs/lab-local/`) |
| **9322** | lab `goa-regio-ng` SSH/ansible (loopback) |
| **8288** | lab `mytops-local` HTTP (loopback) |
login-health inventory: `scripts/login-health/koopa-login-health.sh`.