# koopa-admin-log

Ops log and config mirror for host **koopa** (openSUSE Tumbleweed).

**Day logs:** `2026/` (major only, written same day). Topic notes: `YYYY-MM-DD--topic.md`.

**Secrets:** not in this repo — see **`SECRETS.md`** and sibling **`koopa-admin-secrets`**.

## Git origin

| | |
|--|--|
| **origin** | `https://git.hacktivism.ch/hernani/koopa-admin-log.git` |
| Web | https://git.hacktivism.ch/hernani/koopa-admin-log |
| SSH | `ssh://git@git.hacktivism.ch:9200/hernani/koopa-admin-log.git` |

Hosted on **Forgejo rootless** (this host). See `2026/2026-07-10--admin-log-origin-forgejo.md`.

## Layout

```
host/                      # openSUSE host-level config + overview
  overview/services.md     # graphical service map
  systemd/ firewalld/ caddy/ network/
configs/                   # mirrored app configs (caddy, taler, forgejo, …)
  taler-merchant/          # overrides + nginx (same tree style as exchange)
  taler-exchange/          # overrides + coins
  forgejo/                 # rootless git.hacktivism.ch
scripts/                   # merchant, exchange, monitoring helpers
  taler-merchant/          # merchant-model start scripts
  taler-exchange/          # same model; archive/ = greenfield bootstrap
2026/                      # day logs + dated topic notes
```

## Live containers (podman)

| Name | Image / role | Host port |
|------|----------------|-----------|
| `taler-hacktivism` | merchant | **9010** |
| `taler-exchange-hacktivism` | exchange | **9011** |
| `taler-bank-hacktivism` | libeufin-bank (GOA, no IBAN) | **9012** |
| `koopa-castopod` (+ mariadb/redis) | Castopod Fediverse podcast | **9020** |
| `koopa-bonfire` (+ postgres) | Bonfire social | **9021** |
| `koopa-prime` (Jellyfin) | media | **9022** |
| qBittorrent (prime stack) | torrents | **9023** |
| `koopa-forgejo` (+ postgres) | **Forgejo rootless** git | **9024** (+ SSH **9200**) |

Start model (Taler): **root** `/root/start_base_services_*` → shell as service user → `/usr/local/bin/start_*.sh [--restart]`.  
Start model (user apps): `hernani` → `cd ~/koopa-{castopod,bonfire,prime,forgejo} && podman-compose up -d`.

Public hosts: `taler.` / `exchange.` / `bank.` / `castopod.` / `bonfire.` / `prime.` / `bt.` / **`git.hacktivism.ch`**  
(Caddy → 9010–9015 / 9020–**9024**; git-SSH host **9200** direct).

Service **details**: `configs/taler-*`, `configs/forgejo/`, `scripts/*`.  
Host-wide picture: **`host/overview/services.md`**.  
Port table: **`configs/ports.md`**.  
Router: **`../vecigate-admin-log`**.

**Benchmarks** (drive from the local machine, measure on koopa): **`benchmarks/`**  
→ amount ladder: `benchmarks/amount-ladder/`.

**Exchange snapshot/restore (GOA, local images only):**  
→ `2026/2026-07-09--exchange-snapshot-and-restore.md`

**Exchange `/keys` + Wire + bank account (diagram):**  
`configs/taler-exchange/README.md` (section “/keys, Wire and Account”).

**Castopod pilot content (FOSS Airwaves, user ngi, free licenses):**  
`2026/2026-07-09--castopod-content.md` → https://castopod.hacktivism.ch/

**Bonfire FEDERATE + guest public (2026-07-10):**  
`2026/2026-07-10--bonfire-federate.md` → https://bonfire.hacktivism.ch/  
(ground zero: `2026/2026-07-09--bonfire-ground-zero.md`)

**Forgejo rootless (git.hacktivism.ch, no free registration, SSH :9200):**  
`2026/2026-07-10--forgejo-rootless.md` → https://git.hacktivism.ch/