ops: paivana and caddy config refresh

configs/notes/compose.yml

@@ -0,0 +1,38 @@
+# koopa-silverbullet — SilverBullet on CachyOS base (parked; FreeNotes = native enc)
+# Live: /home/hernani/koopa-silverbullet/
+# Build: bash ~/koopa-admin-log/scripts/notes/build.sh → localhost/koopa-silverbullet:cachyos
+#
+# Public :9028 = koopa-paivana-silverbullet (shared paivana image).
+# Backend loopback only — Paivana DEST → 127.0.0.1:19128
+services:
+  notes:
+    image: localhost/koopa-silverbullet:cachyos
+    build:
+      context: .
+      dockerfile: Containerfile
+      args:
+        SB_VERSION: "${SB_VERSION:-2.10.0}"
+    container_name: koopa-silverbullet
+    restart: unless-stopped
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Zurich
+      - SB_INDEX_PAGE=index
+      - SB_NAME=SilverBullet
+      - SB_SHELL_BACKEND=off
+      # Optional app-layer auth (prefer Caddy basicauth; leave empty in .env to skip):
+      # - SB_USER=${SB_USER}
+    volumes:
+      - ./space:/space
+    ports:
+      - "127.0.0.1:${BACKEND_PORT:-19128}:3000"
+    labels:
+      org.hacktivism.service: silverbullet
+      org.hacktivism.host_port: "9028"
+      org.hacktivism.backend_port: "${BACKEND_PORT:-19128}"
+      org.hacktivism.site: silverbullet.hacktivism.ch
+      org.hacktivism.managed_by: koopa-admin
+      org.hacktivism.port_status: backend-19128-paywall-9028
+      org.hacktivism.image_base: cachyos
+