# Galene — SFU on CachyOS (koopa)

| Item | Value |
|------|--------|
| Stack | [Galene](https://galene.org/) |
| Image | `localhost/koopa-galene:cachyos` (`FROM docker.io/cachyos/cachyos`) |
| Build | Go from git tag `GALENE_REF` (default `galene-0.96.3`; no release tarballs) |
| Live dir | `/home/hernani/koopa-galene/` |
| Container | `koopa-galene` |
| Host port | **9029** = Paivana paywall; Galene HTTP backend **127.0.0.1:19129** (`-insecure`) |
| Public site | `galene.hacktivism.ch` |

## Build + up (koopa)

```bash
bash /path/to/koopa-admin-log/scripts/galene/build.sh
mkdir -p ~/koopa-galene && cp -a /path/to/koopa-admin-log/configs/galene/compose.yml ~/koopa-galene/
cd ~/koopa-galene && podman-compose up -d
```

## Caddy

```bash
sudo bash /path/to/koopa-admin-log/scripts/caddy/caddy-apply.sh \
  --snippet /path/to/koopa-admin-log/configs/caddy/galene.hacktivism.ch.caddy \
  --site galene.hacktivism.ch --port 9029 --label galene
```

DNS + VeciGate for the hostname; WebRTC UDP ports documented when first room is live.

## Notes

- Volume `./data` must not hide UI assets; entrypoint passes `-static /opt/galene/static`.
- Example group: copy `groups/hacktivism.json.example` → `~/koopa-galene/data/groups/hacktivism.json` (change op password).
- WebRTC UDP: compose publishes **10000–10099/udp**; set the same range in VeciGate DNAT → koopa. Entrypoint uses `-udp-range` (`GALENE_UDP_RANGE`).
- Built-in TURN (`-turn auto`) logs `no public addresses` until the host has a reachable public/mapped address; fix UDP/NAT first, then re-check logs.