ops: login-health CRITICAL goa-regio-ng drop legacy CTRs

scripts/login-health/koopa-login-health.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 # koopa-login-health — read-only GOA/koopa service health.
-# Inventory: koopa-admin-log host/overview/LIVE.md (+ ports.md).
+# Inventory: configs/ports.md + arrays below (goa-regio-ng single CTR).
 #
 # Architecture:
 #   collect  — run probes, write snapshot (systemd user timer; NOT on login)
@@ -138,16 +138,12 @@ do_show() {
 
 # ---------- COLLECT: probes → write snapshot ----------
 CRITICAL_CONTAINERS=(
-  taler-hacktivism
-  taler-hacktivism-exchange-ansible
-  taler-hacktivism-bank
+  goa-regio-ng
   koopa-forgejo
 )
 
 EXPECT_CONTAINERS=(
-  taler-hacktivism
-  taler-hacktivism-exchange-ansible
-  taler-hacktivism-bank
+  goa-regio-ng
   koopa-castopod
   koopa-bonfire
   koopa-lemmy-proxy
@@ -156,7 +152,6 @@ EXPECT_CONTAINERS=(
   koopa-prime-qbittorrent
   koopa-forgejo
   koopa-paivana
-  koopa-tor-relay
   koopa-nym
   koopa-tops-ng1
   koopa-tops-ng2
@@ -167,7 +162,6 @@ OPTIONAL_CONTAINERS=(
   koopa-prime-jellyfin
   koopa-prime-qbittorrent
   koopa-nym
-  koopa-tor-relay
   koopa-tops-ng1
   koopa-tops-ng2
   koopa-tops-ng3
@@ -268,6 +262,12 @@ do_collect() {
     else
       record FAIL "caddy.service is ${caddy_st} (edge HTTPS)"
     fi
+    tor_st=$(systemctl is-active tor 2>/dev/null || echo unknown)
+    if [ "${tor_st}" = "active" ]; then
+      record OK "tor.service active"
+    else
+      record WARN "tor.service is ${tor_st} (host ORPort/ControlPort)"
+    fi
     for sock in http-proxy.socket https-proxy.socket; do
       st=$(systemctl is-active "${sock}" 2>/dev/null || echo unknown)
       if [ "${st}" = "active" ] || [ "${st}" = "listening" ]; then