docs: new root as prior history lost (orphan + GC); ~215 commits not recoverable

host/overview/LIVE.md

@@ -0,0 +1,104 @@
+# Live inventory — koopa (2026-07-13)
+
+Snapshot of **what runs on host koopa** (openSUSE Tumbleweed). No secrets.
+
+Refresh command ideas:
+
+```bash
+hostname; date -R
+podman ps --format 'table {{.Names}}\t{{.Image}}\t{{.Status}}\t{{.Ports}}'
+systemctl is-active caddy
+systemctl --user is-active container-koopa-tor-relay
+ss -lntp | grep -E '90[0-9]{2}|9200|8080'
+```
+
+## Host
+
+| Item | Value |
+|------|--------|
+| Hostname | `koopa` |
+| Role | App host behind VeciGate (WAN :80→9000, :443→9001) |
+| Edge | Caddy **9000/9001**, systemd socket proxies **80/443** |
+| Tor | **podman `koopa-tor-relay`** (host net) ORPort **8080** dual-stack, ControlPort **127.0.0.1:9051** — not host `tor.service` |
+
+## Running podman containers
+
+| Name | Image | Ports (host) | Public site |
+|------|--------|--------------|-------------|
+| `taler-hacktivism` | `localhost/taler-hacktivism-live:landing` | **9010**, **9015** | `taler.hacktivism.ch` |
+| **`taler-hacktivism-exchange-ansible`** | `localhost/taler-hacktivism-exchange-ansible:landing` | **9011**, **9014** | `exchange.hacktivism.ch` |
+| `taler-hacktivism-bank` | **`localhost/taler-hacktivism-banking:live`** | **9012**, **9013** | `bank.hacktivism.ch` |
+| `koopa-castopod` (+ mariadb, redis) | `castopod/castopod:1` | **9020** | `castopod.hacktivism.ch` |
+| `koopa-bonfire` (+ postgres) | `bonfire:1.0.5-social-amd64` | **9021** | `bonfire.hacktivism.ch` |
+| `koopa-prime-jellyfin` | `linuxserver/jellyfin:10.10.7` | **9022** | `prime.hacktivism.ch` |
+| `koopa-prime-qbittorrent` | `linuxserver/qbittorrent:5.0.4` | **9023**, **6881** | `bt.hacktivism.ch` |
+| `koopa-forgejo` (+ postgres) | `forgejo:11-rootless` | **9024**, **9200** | `git.hacktivism.ch` |
+| **`koopa-tor-relay`** | `localhost/koopa-tor-relay:latest` | **8080**, **9051** (host net) | Tor OR (non-exit) |
+| `koopa-tops-ng1` | `nginx` | **9090** | `tops.ng1.hacktivism.ch` |
+| `koopa-tops-ng2` | `nginx` | **9091** | `tops.ng2.hacktivism.ch` |
+| `koopa-tops-ng3` | `nginx` | **9092** | `tops.ng3.hacktivism.ch` |
+
+### Naming note (exchange)
+
+Live exchange container is **`taler-hacktivism-exchange-ansible`** (not `taler-hacktivism-exchange-ansible` / not without `-ansible`).  
+Managed from **`/home/hernani/ansible-taler-exchange/`** (see `configs/taler-exchange-ansible/`).
+
+## Caddy vhosts → backends
+
+| Host | Backend |
+|------|---------|
+| `taler.hacktivism.ch` | 9010 (API) + 9015 (`/intro`) |
+| `exchange.hacktivism.ch` | 9011 + 9014 (`/intro`) |
+| `bank.hacktivism.ch` | 9012 + 9013 (`/intro`, terms, privacy) |
+| `castopod.hacktivism.ch` | 9020 |
+| `bonfire.hacktivism.ch` | 9021 |
+| `prime.hacktivism.ch` | 9022 |
+| `bt.hacktivism.ch` | 9023 |
+| `git.hacktivism.ch` | 9024 (HTTP); git-SSH **9200** host-direct |
+| `tops.ng1.hacktivism.ch` | 9090 |
+| `tops.ng2.hacktivism.ch` | 9091 |
+| `tops.ng3.hacktivism.ch` | 9092 |
+
+Config: `/etc/caddy/Caddyfile` (mirror `configs/caddy/Caddyfile`).
+
+## Paths on host (`hernani`)
+
+| Path | Role |
+|------|------|
+| `~/ansible-taler-exchange/` | Ansible + scripts for exchange-ansible container |
+| `~/koopa-castopod/` | Castopod compose |
+| `~/koopa-bonfire/` | Bonfire compose + gitbot |
+| `~/koopa-prime/` | Jellyfin + qBittorrent |
+| `~/koopa-forgejo/` | Forgejo rootless |
+| `~/koopa-tops/` | tops.ng1–ng3 (`koopa-tops-ng*`) |
+| `~/koopa-caddy/` | Caddyfile working tree on host |
+| `~/koopa-tor-relay/` | Tor relay container (torrc, data/identity, log) |
+
+## Start models
+
+| Stack | How |
+|-------|-----|
+| Taler merchant/bank | root `start_base_services_*` → service user → `/usr/local/bin/start_*.sh` |
+| Exchange (GOA) | `~/ansible-taler-exchange/run-container-koopa.sh` then `deploy-hacktivism-goa.sh` |
+| User apps | `cd ~/koopa-* && podman-compose up -d` |
+| tops (ng1–ng3) | user unit `container-koopa-tops.service` (linger) |
+
+## Config mirrors in this repo (`configs/`)
+
+| Live container | Git path |
+|----------------|----------|
+| `taler-hacktivism` | `configs/taler-hacktivism/` |
+| `taler-hacktivism-bank` (image **…-banking**) | `configs/taler-hacktivism-bank/` |
+| `taler-hacktivism-exchange-ansible` | `configs/taler-exchange-ansible/` + conf in `configs/taler-exchange/` |
+| `koopa-tops-ng1` … `ng3` | `configs/tops/` |
+
+## Related docs in this repo
+
+| Topic | Doc |
+|-------|-----|
+| Ports | `configs/ports.md` |
+| Diagram | `host/overview/services.md` |
+| Exchange Ansible (koopa) | `configs/taler-exchange-ansible/` |
+| Forgejo | `2026/2026-07-10--forgejo-rootless.md` |
+| Bonfire public feeds | `configs/bonfire/public-feeds.md` |
+| Castopod content | `2026/2026-07-09--castopod-content.md` |