hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: host Caddyfile applied (git ACME + SSH :9200 verified)

Browse source 
Live /etc/caddy/Caddyfile matches configs/caddy mirror. Record
daylog, forgejo note, and close LOCAL-CHANGES-PENDING Caddy items.
This commit is contained in:
Hernâni Marques 2026-07-10 15:16:43 +02:00
parent fa0f37e58d
commit fa20edf2e9
No known key found for this signature in database
3 changed files with 43 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

40
ops/LOCAL-CHANGES-PENDING.md Normal file
View file

@ -0,0 +1,40 @@
# Local changes / follow-ups — not yet committed
Working list for koopa-admin-log. Items here are **to do or only local** until explicitly committed and pushed to `git.hacktivism.ch`.
Status legend: `open` · `local-only` · `done-on-host` · `blocked`
---
## Nachführen (sync / mirror)
| Item | Status | Notes |
|------|--------|--------|
| Live `/etc/caddy/Caddyfile` vs `configs/caddy/Caddyfile` | `done-on-host` | Applied 2026-07-10; live **MATCH** mirror (git. in ACME list, SSH :9200). |
| `firewall-cmd --list-all` re-export | `open` | `host/firewalld/list-all.txt` updated by hand with **9200/tcp** (verified open). Re-export as root when possible for exact dump. |
| Castopod compose mirror | `done` (committed) | `configs/castopod/` |
| Prime compose mirror | `done` (committed) | `configs/prime/` (WEBUI_PASSWORD redacted) |
| Tor `configs/tor/` | `done` (committed) | matched live; README added |
| `host/caddy/` full vhost map | `done` (committed) | was stale Taler-only |
## Local-only / do not commit yet
| Path / topic | Status | Notes |
|--------------|--------|--------|
| *(none staged intentionally)* | — | Keep secrets out of this repo always. |
| This file (`ops/LOCAL-CHANGES-PENDING.md`) | `done` | Committed with Caddy apply verification. |
## Host ops (not in git)
| Item | Status | Notes |
|------|--------|--------|
| Apply desired Caddyfile on koopa | `done-on-host` | verified MATCH 2026-07-10 |
| firewalld permanent 9200 | `done-on-host` | verified LAN/hairpin/`ssh -T` |
| VeciGate 9200 DNAT/hairpin/IPv6 | `done-on-host` | see vecigate-admin-log |
## When closing an item
1. Fix on host and/or update mirror in this tree.
2. `git add` · commit · `git push origin main`.
3. Mark row `done` or remove from this list.
4. If this tracking file itself should be public, commit it in a separate intentional commit.