hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: ports + koopa-setup goa-regio-ng pasta map

Browse source
This commit is contained in:
Hernâni Marques 2026-09-19 01:38:51 +02:00
parent 82879637b6
commit 4974032188
No known key found for this signature in database
2 changed files with 42 additions and 40 deletions
Download patch file Download diff file Expand all files Collapse all files

72
configs/ports.md
View file

@ -1,4 +1,4 @@
# Port map (see also host/overview/services.md) # Port map (koopa)
| Port | Role | | Port | Role |
|------|------| |------|------|
@ -7,45 +7,43 @@
| 443 | systemd `https-proxy.socket` → Caddy **9001** | | 443 | systemd `https-proxy.socket` → Caddy **9001** |
| 9000 | Caddy HTTP + ACME webroot | | 9000 | Caddy HTTP + ACME webroot |
| 9001 | Caddy HTTPS (vhosts) | | 9001 | Caddy HTTPS (vhosts) |
| 9010 | podman `taler-hacktivism` (merchant) | | **9010** | `goa-regio-ng` merchant API (HTTPS in CTR) |
| 9011 | podman **`taler-hacktivism-exchange-ansible`** (exchange) | | **9011** | `goa-regio-ng` exchange |
| 9012 | podman `taler-hacktivism-bank` (libeufin-bank) | | **9012** | `goa-regio-ng` libeufin-bank |
| 9013–9015 | bank / exchange / merchant public landings | | **9013–9015** | bank / exchange / merchant public landings (host nginx) |
| 9020 | podman `koopa-castopod` → Caddy `castopod.hacktivism.ch` | | 9020 | `koopa-castopod` → `castopod.hacktivism.ch` |
| 9021 | podman `koopa-bonfire` → Caddy `bonfire.hacktivism.ch` | | 9021 | `koopa-bonfire` → `bonfire.hacktivism.ch` |
| 9022 | podman `koopa-prime` (Jellyfin) → Caddy `prime.hacktivism.ch` | | 9022 | `koopa-prime` (Jellyfin) → `prime.hacktivism.ch` |
| 9023 | podman qBittorrent → Caddy `bt.hacktivism.ch` | | 9023 | qBittorrent → `bt.hacktivism.ch` |
| **9024** | podman **`koopa-forgejo`** (HTTP) → Caddy **`git.hacktivism.ch`** | | **9024** | `koopa-forgejo` (HTTP) → **`git.hacktivism.ch`** |
| **9025** | podman **`koopa-paivana`** (portal paywall) → Caddy **`paivana.hacktivism.ch`** | | **9025** | `koopa-paivana` → `paivana.hacktivism.ch` |
| **9026** | podman **`koopa-lemmy-proxy`** → Caddy **`lemmy.hacktivism.ch`** | | **9026** | `koopa-lemmy-proxy` → `lemmy.hacktivism.ch` |
| **9027** | podman **`koopa-decidim`** → Caddy **`decidim.hacktivism.ch`** | | **9027** | `koopa-decidim` → `decidim.hacktivism.ch` |
| **9028** | podman **`koopa-paivana-silverbullet`** → Caddy **`silverbullet.hacktivism.ch`** (app backend `172.17.0.1:19128`) | | **9028** | `koopa-paivana-silverbullet` → `silverbullet.hacktivism.ch` |
| **9029** | podman **`koopa-paivana-galene`** → Caddy **`galene.hacktivism.ch`** (app backend `172.17.0.1:19129`; UDP 10000–10099 still Galene) | | **9029** | `koopa-paivana-galene` → `galene.hacktivism.ch` |
| **9030** | podman **`koopa-paivana-cryptpad`** → Caddy **`cryptpad.hacktivism.ch`** (edge backend `172.17.0.1:19130`) | | **9030** | `koopa-paivana-cryptpad` → `cryptpad.hacktivism.ch` |
| **9031** | podman **`koopa-paivana-meet`** → Caddy **`meet.hacktivism.ch`** (app backend `172.17.0.1:19131`) | | **9031** | `koopa-paivana-meet` → `meet.hacktivism.ch` |
| **9032** | podman **`koopa-bbb-front`** (Ubuntu) → Caddy **`bbb.hacktivism.ch`** | | **9032** | `koopa-bbb-front` → `bbb.hacktivism.ch` |
| **9200** | podman **Forgejo git-SSH** (host-direct; not Caddy) | | **9200** | Forgejo git-SSH (host-direct; not Caddy) |
| 9090–9092 | podman `koopa-tops-ng1` … `ng3` → Caddy `tops.ng{1,2,3}.hacktivism.ch` | | 9090–9092 | `koopa-tops-ng1`…`ng3` → `tops.ng{1,2,3}.hacktivism.ch` |
| 8080 | Tor ORPort | | **8080** | host `tor.service` ORPort |
| **9051** | host Tor ControlPort (loopback) |
VeciGate: WAN **80→9000**, WAN **443→9001**. VeciGate: WAN **80→9000**, WAN **443→9001**.
Public apps: Caddy vhosts on **9001** → 127.0.0.1:{9010–9015, 9020–9032, 9090–9092}. Public apps: Caddy on **9001** → 127.0.0.1:{9010–9015, 9020–9032, 9090–9092}.
Git SSH needs separate NAT/firewall **9200/tcp** if exposed to WAN. Git SSH needs **9200/tcp** if exposed to WAN.
Meet/Galene/BBB media UDP is separate from these HTTP ports.
| UDP range | Role | | UDP range | Role |
|-----------|------| |-----------|------|
| **10000–10099/udp** | **Galene** WebRTC (host publish + planned VeciGate DNAT → koopa) | | **10000–10099/udp** | Galene WebRTC |
| (TBD) | Meet JVB / BBB media — allocate when Phase‑2 / full BBB leaves park |
| **1789** | podman **`koopa-nym`** mixnet (nym.com nym-node) | | Extra | Role |
| **1790** | podman **`koopa-nym`** verloc | |-------|------|
| **9080** | podman **`koopa-nym`** HTTP API (mapped from container 8080; Tor keeps **8080**) | | **1789** | `koopa-nym` mixnet |
| **9180** | lab **`goa-regio-ng`** HTTP (loopback only; see `configs/lab-local/`) | | **1790** | `koopa-nym` verloc |
| **9322** | lab **`goa-regio-ng`** SSH/ansible (loopback only) | | **9080** | `koopa-nym` HTTP API |
| **8288** | lab **`mytops-local`** HTTP (loopback only) | | **9180** | lab `goa-regio-ng` HTTP (loopback; `configs/lab-local/`) |
| **19000** | optional nym entry WS (gateway mode) | | **9322** | lab `goa-regio-ng` SSH/ansible (loopback) |
| **51822/udp** | optional nym WireGuard (dVPN path) | | **8288** | lab `mytops-local` HTTP (loopback) |
| **9180** | lab **`goa-regio-ng`** HTTP (loopback only; see `configs/lab-local/`) |
| **9322** | lab **`goa-regio-ng`** SSH/ansible (loopback only) | login-health inventory: `scripts/login-health/koopa-login-health.sh`.
| **8288** | lab **`mytops-local`** HTTP (loopback only) |

10
koopa-setup
View file

@ -14,14 +14,18 @@ configs/ports.md
2026/2026-09-04--mytops-local-podman.md 2026/2026-09-04--mytops-local-podman.md
# outward: ~/git/mytops-admin-log → git switch mytops-local # outward: ~/git/mytops-admin-log → git switch mytops-local
## goa-regio-ng ## goa-regio-ng (live GOA on koopa)
# single CTR goa-regio-ng · pasta 9010–9015 · landings host-side
# SoT: scripts/taler-shared/goa-regio-ng/ · bak ~/backups/goa/current
2026/2026-09-04--goa-backup-regio-ng.md 2026/2026-09-04--goa-backup-regio-ng.md
# outward: ~/src/regio-local/ configs/ports.md
scripts/login-health/
## host map ## host map
host/overview/ configs/ports.md
configs/caddy/ configs/caddy/
host/tor/README.md
SECRETS.md SECRETS.md
ISSUES.md ISSUES.md