From b0efda7731bbf673849bc00c7b9fb2ca11ea289b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Hern=C3=A2ni=20Marques?= Date: Fri, 10 Jul 2026 14:38:28 +0200 Subject: [PATCH] docs: Forgejo git-SSH on host port 9200 --- 2026/2026-07-10--forgejo-rootless.md | 4 ++-- 2026/2026-07-10.md | 2 +- README.md | 2 +- configs/caddy/git.hacktivism.ch.caddy | 2 +- configs/forgejo/compose.yml | 8 ++++---- 5 files changed, 9 insertions(+), 9 deletions(-) diff --git a/2026/2026-07-10--forgejo-rootless.md b/2026/2026-07-10--forgejo-rootless.md index f00cff1..85a4663 100644 --- a/2026/2026-07-10--forgejo-rootless.md +++ b/2026/2026-07-10--forgejo-rootless.md @@ -18,7 +18,7 @@ Do **not** switch to the non-rootless `forgejo:11` image under rootless podman: | Path | `/home/hernani/koopa-forgejo/` | | Containers | `koopa-forgejo` (**rootless**), `koopa-forgejo-db` (postgres:16-alpine) | | HTTP | host **9024** → Caddy `git.hacktivism.ch` | -| SSH (git) | host **2222** → container 2222 (direct; not via Caddy) | +| SSH (git) | host **9200** → container 2222 (direct; not via Caddy) | | ROOT_URL | `https://git.hacktivism.ch/` | | Landing | explore (public browse OK) | @@ -60,5 +60,5 @@ sudo systemctl reload caddy ## Notes - DNS already points `git.hacktivism.ch` at koopa (with other hacktivism names). -- Git over SSH: `ssh://git@git.hacktivism.ch:2222/…` (open **2222** on firewall/router if WAN access needed). +- Git over SSH: `ssh://git@git.hacktivism.ch:9200/…` (open **9200**/tcp on firewall/router if WAN access needed). - Until Caddy is reloaded, only `http://127.0.0.1:9024` works on host. diff --git a/2026/2026-07-10.md b/2026/2026-07-10.md index cff0176..1a8f368 100644 --- a/2026/2026-07-10.md +++ b/2026/2026-07-10.md @@ -3,4 +3,4 @@ - landing mem snapshot fix (pipeline → 0 B) - Caddy redir / → /intro/ (three sites) - SECRETS.md paths only; no secret material in admin-log -- **Forgejo rootless** on `git.hacktivism.ch` (:9024 / SSH :2222); no free registration +- **Forgejo rootless** on `git.hacktivism.ch` (:9024 / SSH :9200); no free registration diff --git a/README.md b/README.md index e66834b..d451eb8 100644 --- a/README.md +++ b/README.md @@ -29,7 +29,7 @@ scripts/ # merchant, exchange, monitoring helpers | `taler-exchange-hacktivism` | exchange | **9011** | | `taler-bank-hacktivism` | libeufin-bank (GOA, no IBAN) | **9012** | | `koopa-castopod` (+ mariadb/redis) | Castopod Fediverse podcast | **9020** | -| `koopa-forgejo` (+ postgres) | **Forgejo rootless** git | **9024** (+ SSH **2222**) | +| `koopa-forgejo` (+ postgres) | **Forgejo rootless** git | **9024** (+ SSH **9200**) | Start model (Taler): **root** `/root/start_base_services_*` → shell as service user → `/usr/local/bin/start_*.sh [--restart]`. Start model (Castopod): `hernani` → `cd ~/koopa-castopod && podman-compose up -d`. diff --git a/configs/caddy/git.hacktivism.ch.caddy b/configs/caddy/git.hacktivism.ch.caddy index c20d9a7..602ff1f 100644 --- a/configs/caddy/git.hacktivism.ch.caddy +++ b/configs/caddy/git.hacktivism.ch.caddy @@ -1,4 +1,4 @@ -# 9024 forgejo HTTP (SSH :2222 host-direct, not via Caddy) +# 9024 forgejo HTTP (SSH :9200 host-direct, not via Caddy) # Apply on host: merge into /etc/caddy/Caddyfile, validate, reload git.hacktivism.ch { header Alt-Svc "clear" diff --git a/configs/forgejo/compose.yml b/configs/forgejo/compose.yml index df3df7c..4c3a233 100644 --- a/configs/forgejo/compose.yml +++ b/configs/forgejo/compose.yml @@ -1,5 +1,5 @@ # koopa-forgejo — ROOTLESS Forgejo image + rootless podman (user hernani) -# Site: https://git.hacktivism.ch | HTTP :9024 | SSH :2222 +# Site: https://git.hacktivism.ch | HTTP :9024 | SSH :9200 services: forgejo: image: codeberg.org/forgejo/forgejo:11-rootless @@ -20,7 +20,7 @@ services: FORGEJO__server__SSH_DOMAIN: git.hacktivism.ch FORGEJO__server__ROOT_URL: https://git.hacktivism.ch/ FORGEJO__server__HTTP_PORT: "3000" - FORGEJO__server__SSH_PORT: "2222" + FORGEJO__server__SSH_PORT: "9200" FORGEJO__server__SSH_LISTEN_PORT: "2222" FORGEJO__server__START_SSH_SERVER: "true" FORGEJO__server__DISABLE_SSH: "false" @@ -41,7 +41,7 @@ services: FORGEJO____APP_NAME: "hacktivism git" ports: - "9024:3000" - - "2222:2222" + - "9200:2222" volumes: - ./data:/var/lib/gitea - ./config:/etc/gitea @@ -53,7 +53,7 @@ services: org.hacktivism.service: forgejo org.hacktivism.variant: rootless org.hacktivism.host_port: "9024" - org.hacktivism.ssh_port: "2222" + org.hacktivism.ssh_port: "9200" org.hacktivism.site: git.hacktivism.ch org.hacktivism.managed_by: koopa-admin healthcheck: