From fb3ca7be10ebc46eba4441df399df05b74197c07 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Hern=C3=A2ni=20Marques?= <hernani+magikoopa@vecirex.net>
Date: Sat, 19 Sep 2026 00:31:17 +0200
Subject: [PATCH] ops: login-health CRITICAL goa-regio-ng drop legacy CTRs

---
 scripts/login-health/koopa-login-health.sh | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/scripts/login-health/koopa-login-health.sh b/scripts/login-health/koopa-login-health.sh
index 309a782..80ebdbc 100755
--- a/scripts/login-health/koopa-login-health.sh
+++ b/scripts/login-health/koopa-login-health.sh
@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 # koopa-login-health — read-only GOA/koopa service health.
-# Inventory: koopa-admin-log host/overview/LIVE.md (+ ports.md).
+# Inventory: configs/ports.md + arrays below (goa-regio-ng single CTR).
 #
 # Architecture:
 #   collect  — run probes, write snapshot (systemd user timer; NOT on login)
@@ -138,16 +138,12 @@ do_show() {
 
 # ---------- COLLECT: probes → write snapshot ----------
 CRITICAL_CONTAINERS=(
-  taler-hacktivism
-  taler-hacktivism-exchange-ansible
-  taler-hacktivism-bank
+  goa-regio-ng
   koopa-forgejo
 )
 
 EXPECT_CONTAINERS=(
-  taler-hacktivism
-  taler-hacktivism-exchange-ansible
-  taler-hacktivism-bank
+  goa-regio-ng
   koopa-castopod
   koopa-bonfire
   koopa-lemmy-proxy
@@ -156,7 +152,6 @@ EXPECT_CONTAINERS=(
   koopa-prime-qbittorrent
   koopa-forgejo
   koopa-paivana
-  koopa-tor-relay
   koopa-nym
   koopa-tops-ng1
   koopa-tops-ng2
@@ -167,7 +162,6 @@ OPTIONAL_CONTAINERS=(
   koopa-prime-jellyfin
   koopa-prime-qbittorrent
   koopa-nym
-  koopa-tor-relay
   koopa-tops-ng1
   koopa-tops-ng2
   koopa-tops-ng3
@@ -268,6 +262,12 @@ do_collect() {
     else
       record FAIL "caddy.service is ${caddy_st} (edge HTTPS)"
     fi
+    tor_st=$(systemctl is-active tor 2>/dev/null || echo unknown)
+    if [ "${tor_st}" = "active" ]; then
+      record OK "tor.service active"
+    else
+      record WARN "tor.service is ${tor_st} (host ORPort/ControlPort)"
+    fi
     for sock in http-proxy.socket https-proxy.socket; do
       st=$(systemctl is-active "${sock}" 2>/dev/null || echo unknown)
       if [ "${st}" = "active" ] || [ "${st}" = "listening" ]; then