hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

caddy: HTTP 9000 HTTPS 9001; ACME webroot; firewalld open 9000/9001/80

Browse source
This commit is contained in:
Hernâni Marques 2026-07-08 16:18:44 +02:00
parent b587bb0eeb
commit 5c0101f24b
No known key found for this signature in database
7 changed files with 249 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

20
configs/ports.md
View file

@ -1,3 +1,19 @@
# Ports
# Port map (see also host/overview/services.md)
80→8085, 443→8443; Caddy 8085/8443; merchant 8081
| Port | Role |
|------|------|
| 22 | sshd (WAN often via VeciGate 23235) |
| 80 | systemd `http-proxy.socket` → Caddy **9000** |
| 443 | systemd `https-proxy.socket` → Caddy **9001** |
| 9000 | Caddy HTTP + ACME webroot |
| 9001 | Caddy HTTPS (vhosts) |
| 9010 | podman `taler-hacktivism` (merchant nginx TLS) — **not** in firewalld |
| 9011 | podman `taler-exchange-hacktivism` (exchange httpd) — **not** in firewalld |
| 9012 | podman `taler-bank-hacktivism` (libeufin-bank) — **not** in firewalld |
| 9020 | podman `koopa-castopod` (HTTP) → Caddy `castopod.hacktivism.ch` |
| 9021 | podman `koopa-bonfire` → Caddy `bonfire.hacktivism.ch` |
| 8080 | Tor ORPort |
VeciGate: WAN **80→9000**, WAN **443→9001**.
Public Taler: Caddy vhosts on **9001** → 127.0.0.1:{9010,9011,9012}.
Planned SM: Caddy → 127.0.0.1:9020+ (not deployed yet).