b5c1bf7591
Capture what is actually running on host koopa: podman names/ports, Caddy vhosts, and hernani paths. Authoritative snapshot: host/overview/LIVE.md. Rename docs to live container taler-hacktivism-exchange-ansible (not the short taler-exchange-hacktivism label). Add public-only mirror of ~/ansible-taler-exchange deploy helpers (no secrets.yml).
1.2 KiB
1.2 KiB
Port map (see also host/overview/services.md)
| Port | Role |
|---|---|
| 22 | sshd (WAN often via VeciGate 23235) |
| 80 | systemd http-proxy.socket → Caddy 9000 |
| 443 | systemd https-proxy.socket → Caddy 9001 |
| 9000 | Caddy HTTP + ACME webroot |
| 9001 | Caddy HTTPS (vhosts) |
| 9010 | podman taler-hacktivism (merchant) |
| 9011 | podman taler-hacktivism-exchange-ansible (exchange) |
| 9012 | podman taler-hacktivism-bank (libeufin-bank) |
| 9013–9015 | bank / exchange / merchant public landings |
| 9020 | podman koopa-castopod → Caddy castopod.hacktivism.ch |
| 9021 | podman koopa-bonfire → Caddy bonfire.hacktivism.ch |
| 9022 | podman koopa-prime (Jellyfin) → Caddy prime.hacktivism.ch |
| 9023 | podman qBittorrent → Caddy bt.hacktivism.ch |
| 9024 | podman koopa-forgejo (HTTP) → Caddy git.hacktivism.ch |
| 9200 | podman Forgejo git-SSH (host-direct; not Caddy) |
| 8080 | Tor ORPort |
VeciGate: WAN 80→9000, WAN 443→9001.
Public apps: Caddy vhosts on 9001 → 127.0.0.1:{9010–9015, 9020–9024}.
Git SSH needs separate NAT/firewall 9200/tcp if exposed to WAN.