decidim: decidim.hacktivism.ch behind Caddy :9027

2026/2026-08-17--decidim.md

@@ -0,0 +1,33 @@
+# Decidim — decidim.hacktivism.ch (2026-08-17)
+
+Site: **https://decidim.hacktivism.ch/**  
+Port **9027** → Caddy. Stack: `koopa-decidim` + `koopa-decidim-sidekiq` + `koopa-decidim-db` + `koopa-decidim-redis`. Image `decidim/decidim:0.30.8`.
+
+Live: `~/koopa-decidim/` (compose mirror `configs/decidim/`). Secrets only on host (`.env`, `users.env`).
+
+Instance name **hacktivism**. Theme: exchange-dark (gold `#e8a838`, bg `#1a1410`) via `theme/hacktivism.css`. Analog: `configs/lemmy/`.
+
+Admin users are on the host (`~/koopa-decidim/users.env`), not in this repo.
+
+Caddy: `sudo /home/hernani/koopa-caddy/apply.sh`  
+Boot: `scripts/decidim/install-systemd.sh` (linger already yes on koopa).
+
+## Cookie / privacy
+
+Stock Decidim still emits `#dc-dialog-wrapper` (Accept all / essential / Settings). This instance has no third-party trackers; privacy is default.
+
+- CSS: `#dc-dialog-wrapper, .cookies__container { display: none !important; }`
+- JS: `/hacktivism-consent.js` sets `decidim-consent={"essential":true}` if missing
+- Live 2026-08-17: HTML 200, CSS/JS 200, hide rules in public `/hacktivism.css`
+
+## Reboot (checked 2026-08-17)
+
+| Item | Value |
+|------|--------|
+| linger `hernani` | yes |
+| `container-koopa-decidim-db` | enabled + active |
+| `container-koopa-decidim` | enabled + active |
+| `container-koopa-lemmy-db` / `container-koopa-lemmy` | enabled + active |
+| listen | `:9027` `:9026` |
+
+login-health: probes + containers + linger + these units enabled. Loopback HTTP on :9027 is **301** (app wants HTTPS; TLS is Caddy). Probe allows 301. After reboot: login-health only unless asked.