# Local changes / follow-ups — not yet committed

Working list for koopa-admin-log. Items here are **to do or only local** until explicitly committed and pushed to `git.hacktivism.ch`.

Status legend: `open` · `local-only` · `done-on-host` · `blocked`

---

## Nachführen (sync / mirror)

| Item | Status | Notes |
|------|--------|--------|
| Live `/etc/caddy/Caddyfile` vs `configs/caddy/Caddyfile` | `done-on-host` | Applied 2026-07-10; live **MATCH** mirror (git. in ACME list, SSH :9200). |
| `firewall-cmd --list-all` re-export | `open` | `host/firewalld/list-all.txt` updated by hand with **9200/tcp** (verified open). Re-export as root when possible for exact dump. |
| Castopod compose mirror | `done` (committed) | `configs/castopod/` |
| Prime compose mirror | `done` (committed) | `configs/prime/` (WEBUI_PASSWORD redacted) |
| Tor `configs/tor/` | `done` (committed) | matched live; README added |
| `host/caddy/` full vhost map | `done` (committed) | was stale Taler-only |

## Local-only / do not commit yet

| Path / topic | Status | Notes |
|--------------|--------|--------|
| *(none staged intentionally)* | — | Keep secrets out of this repo always. |
| This file (`ops/LOCAL-CHANGES-PENDING.md`) | `done` | Committed with Caddy apply verification. |

## Host ops (not in git)

| Item | Status | Notes |
|------|--------|--------|
| Apply desired Caddyfile on koopa | `done-on-host` | verified MATCH 2026-07-10 |
| firewalld permanent 9200 | `done-on-host` | verified LAN/hairpin/`ssh -T` |
| VeciGate 9200 DNAT/hairpin/IPv6 | `done-on-host` | see vecigate-admin-log |

## When closing an item

1. Fix on host and/or update mirror in this tree.  
2. `git add` · commit · `git push origin main`.  
3. Mark row `done` or remove from this list.  
4. If this tracking file itself should be public, commit it in a separate intentional commit.

## Bonfire public feeds (2026-07-10)

| Item | Status | Notes |
|------|--------|--------|
| Outbox → Local/public feed_publish | `done-on-host` | SQL applied; `/feed/local` has posts |
| Guest `/` Front page empty | `open` | Spotlight empty; use `/feed/local` or pin spotlight |
| Federation UI banner | `open` | env FEDERATE=true; may need process restart for persistent federating |