ops: paivana and caddy config refresh

configs/galene/compose.yml

@@ -0,0 +1,30 @@
+# koopa-galene — Galene on CachyOS
+# Live: /home/hernani/koopa-galene/
+# Build: bash ~/koopa-admin-log/scripts/galene/build.sh → localhost/koopa-galene:cachyos
+#
+# Public :9029 = koopa-paivana-galene (shared paivana image).
+# Backend loopback only — Paivana DEST → 127.0.0.1:19129 (HTTP -insecure).
+# WebRTC UDP: still published (see README / ports.md)
+services:
+  galene:
+    image: localhost/koopa-galene:cachyos
+    container_name: koopa-galene
+    restart: unless-stopped
+    environment:
+      - TZ=Europe/Zurich
+      - GALENE_UDP_RANGE=${GALENE_UDP_RANGE:-10000-10099}
+    volumes:
+      - ./data:/data
+      - ./entrypoint.sh:/docker-entrypoint.sh:ro
+    ports:
+      - "127.0.0.1:${BACKEND_PORT:-19129}:8443"
+      - "${GALENE_UDP_LO:-10000}-${GALENE_UDP_HI:-10099}:${GALENE_UDP_LO:-10000}-${GALENE_UDP_HI:-10099}/udp"
+    labels:
+      org.hacktivism.service: galene
+      org.hacktivism.host_port: "9029"
+      org.hacktivism.backend_port: "${BACKEND_PORT:-19129}"
+      org.hacktivism.site: galene.hacktivism.ch
+      org.hacktivism.managed_by: koopa-admin
+      org.hacktivism.port_status: backend-19129-paywall-9029
+      org.hacktivism.image_base: cachyos
+