docs: new root as prior history lost (orphan + GC); ~215 commits not recoverable

configs/taler-exchange/README.md

@@ -0,0 +1,44 @@
+# Exchange config (inside ansible container)
+
+**Live container:** `taler-hacktivism-exchange-ansible`  
+**Image:** `localhost/taler-hacktivism-exchange-ansible:landing`  
+**Deploy tree on host:** `~/ansible-taler-exchange/` → see **`configs/taler-exchange-ansible/`**
+
+This directory mirrors **exchange software config** (overrides, coins, terms), not the Ansible wrapper itself.
+
+Container: **`taler-hacktivism-exchange-ansible`** · image tags `localhost/taler-hacktivism-exchange-ansible-live:9011` (live) and optional snapshot  
+Host port: **9011** (pasta) · public: **https://exchange.hacktivism.ch/** (Caddy → 9011)
+
+**Snapshot + restore (local tar, no registry):**  
+→ [`2026/2026-07-09--exchange-snapshot-and-restore.md`](../../2026/2026-07-09--exchange-snapshot-and-restore.md)
+
+## Terms of service (wallets)
+
+Wallets require a working `/terms` (and usually `/privacy`) with a
+`Taler-Terms-Version` header. If missing, many apps hang on accept /
+`isPending` during the first withdraw QR.
+
+This site uses **minimal stubs** — no formal legal ToS:
+
+| Config | Value |
+|--------|--------|
+| `TERMS_ETAG` | `no-terms-v0` |
+| `PRIVACY_ETAG` | `no-privacy-v0` |
+| files | `/var/lib/taler-exchange/terms/en/no-terms-v0.{html,txt,md}` etc. |
+
+Install / refresh inside the exchange container as root:
+
+```bash
+/usr/local/bin/install_no_terms.sh
+# ensure exchange-overrides.conf has TERMS_ETAG / PRIVACY_ETAG (see above)
+runuser -u taler-exchange-httpd -- /usr/local/bin/start_exchange.sh --restart
+curl -sS -D- http://127.0.0.1:9011/terms | head
+```
+
+Sources: `configs/taler-exchange/terms-src/` and
+`scripts/taler-exchange/install_no_terms.sh`.
+
+## Secrets
+
+`ATTRIBUTE_ENCRYPTION_KEY` and wire/DB credentials are **not** in this tree.  
+See repo-root `SECRETS.md` and `koopa-admin-secrets/containers/taler-exchange/secrets/`.