docs: new root as prior history lost (orphan + GC); ~215 commits not recoverable

2026-07-13 10:12:00 +02:00 · 2026-07-13 10:12:00 +02:00 · 96961f23f5
commit 96961f23f5
268 changed files with 24161 additions and 0 deletions
--- a/README.md
+++ b/README.md
@ -0,0 +1,86 @@
+# koopa-admin-log
+
+Ops log and config mirror for host **koopa** (openSUSE Tumbleweed).
+
+**Day logs:** `2026/` (major only, written same day). Topic notes: `YYYY-MM-DD--topic.md`.
+
+**Secrets:** not in this repo — see **`SECRETS.md`** and sibling **`koopa-admin-secrets`**.
+
+## Git origin
+
+| | |
+|--|--|
+| **origin** | `https://git.hacktivism.ch/hernani/koopa-admin-log.git` |
+| Web | https://git.hacktivism.ch/hernani/koopa-admin-log |
+| SSH | `ssh://git@git.hacktivism.ch:9200/hernani/koopa-admin-log.git` |
+
+Hosted on **Forgejo rootless** (this host). See `2026/2026-07-10--admin-log-origin-forgejo.md`.
+
+## Layout
+
+```
+host/                      # openSUSE host-level config + overview
+  overview/services.md     # graphical service map
+  systemd/ firewalld/ caddy/ network/
+configs/                   # mirrored app configs (caddy, taler, forgejo, …)
+  taler-hacktivism/        # merchant container taler-hacktivism
+  taler-hacktivism-bank/   # bank container (image …-banking)
+  taler-exchange/          # exchange conf (inside ansible container)
+  taler-exchange-ansible/  # container taler-hacktivism-exchange-ansible
+  forgejo/                 # rootless git.hacktivism.ch
+  castopod/ bonfire/ prime/ # compose mirrors (no secret values)
+  tops/                    # koopa-tops-ng1…ng3 + autostart unit
+  tor/                     # KoopaRelay ORPort 8080
+scripts/                   # merchant, exchange, monitoring helpers
+  taler-merchant/          # merchant-model start scripts
+  taler-exchange/          # same model; archive/ = greenfield bootstrap
+2026/                      # day logs + dated topic notes
+```
+
+## Live containers (podman)
+
+**Authoritative snapshot of host koopa:** [`host/overview/LIVE.md`](host/overview/LIVE.md) (refreshed from live).
+
+| Name (podman) | Role | Host port |
+|---------------|------|-----------|
+| `taler-hacktivism` | merchant | **9010** (+ landing **9015**) |
+| **`taler-hacktivism-exchange-ansible`** | exchange (Ansible/systemd) | **9011** (+ landing **9014**) |
+| `taler-hacktivism-bank` | libeufin-bank (GOA) | **9012** (+ landing **9013**) |
+| `koopa-castopod` (+ mariadb/redis) | Castopod | **9020** |
+| `koopa-bonfire` (+ postgres) | Bonfire | **9021** |
+| `koopa-prime-jellyfin` | Jellyfin | **9022** |
+| `koopa-prime-qbittorrent` | qBittorrent | **9023** |
+| `koopa-forgejo` (+ postgres) | Forgejo rootless | **9024** + SSH **9200** |
+| `koopa-tops-ng1` … `ng3` | static nginx | **9090**–**9092** |
+
+Start model (Taler merchant/bank): **root** `start_base_services_*` → `/usr/local/bin/start_*.sh`.  
+Start model (exchange): `~/ansible-taler-exchange/` → `run-container-koopa.sh` + `deploy-hacktivism-goa.sh`.  
+Start model (user apps): `hernani` → `cd ~/koopa-* && podman-compose up -d`.  
+Start model (tops): user unit `container-koopa-tops.service` (linger).
+
+Public hosts: `taler.` / `exchange.` / `bank.` / `castopod.` / `bonfire.` / `prime.` / `bt.` / **`git.hacktivism.ch`** / `tops.ng1`–`ng3`.hacktivism.ch  
+(Caddy → 9010–9015 / 9020–**9024** / **9090–9092**; git-SSH host **9200** direct).
+
+Service **details**: `configs/taler-hacktivism*`, `configs/taler-exchange*`, `configs/forgejo/`, `configs/tops/`, `scripts/*`.  
+Host-wide picture: **`host/overview/services.md`**.  
+Port table: **`configs/ports.md`**.  
+Router: **`../vecigate-admin-log`**.
+
+**Benchmarks** (drive from the local machine, measure on koopa): **`benchmarks/`**  
+→ amount ladder: `benchmarks/amount-ladder/`.
+
+**Exchange snapshot/restore (GOA, local images only):**  
+→ `2026/2026-07-09--exchange-snapshot-and-restore.md`
+
+**Exchange `/keys` + Wire + bank account (diagram):**  
+`configs/taler-exchange/README.md` (section “/keys, Wire and Account”).
+
+**Castopod (stack/accounts/boot — not podcast content):**  
+`2026/2026-07-09--castopod-content.md` → https://castopod.hacktivism.ch/
+
+**Bonfire FEDERATE + guest public (2026-07-10):**  
+`2026/2026-07-10--bonfire-federate.md` → https://bonfire.hacktivism.ch/  
+(ground zero: `2026/2026-07-09--bonfire-ground-zero.md`)
+
+**Forgejo rootless (git.hacktivism.ch, no free registration, SSH :9200):**  
+`2026/2026-07-10--forgejo-rootless.md` → https://git.hacktivism.ch/