51 lines
3.1 KiB
Markdown
51 lines
3.1 KiB
Markdown
# Port map (see also host/overview/services.md)
|
||
|
||
| Port | Role |
|
||
|------|------|
|
||
| 22 | sshd (WAN often via VeciGate 23235) |
|
||
| 80 | systemd `http-proxy.socket` → Caddy **9000** |
|
||
| 443 | systemd `https-proxy.socket` → Caddy **9001** |
|
||
| 9000 | Caddy HTTP + ACME webroot |
|
||
| 9001 | Caddy HTTPS (vhosts) |
|
||
| 9010 | podman `taler-hacktivism` (merchant) |
|
||
| 9011 | podman **`taler-hacktivism-exchange-ansible`** (exchange) |
|
||
| 9012 | podman `taler-hacktivism-bank` (libeufin-bank) |
|
||
| 9013–9015 | bank / exchange / merchant public landings |
|
||
| 9020 | podman `koopa-castopod` → Caddy `castopod.hacktivism.ch` |
|
||
| 9021 | podman `koopa-bonfire` → Caddy `bonfire.hacktivism.ch` |
|
||
| 9022 | podman `koopa-prime` (Jellyfin) → Caddy `prime.hacktivism.ch` |
|
||
| 9023 | podman qBittorrent → Caddy `bt.hacktivism.ch` |
|
||
| **9024** | podman **`koopa-forgejo`** (HTTP) → Caddy **`git.hacktivism.ch`** |
|
||
| **9025** | podman **`koopa-paivana`** (portal paywall) → Caddy **`paivana.hacktivism.ch`** |
|
||
| **9026** | podman **`koopa-lemmy-proxy`** → Caddy **`lemmy.hacktivism.ch`** |
|
||
| **9027** | podman **`koopa-decidim`** → Caddy **`decidim.hacktivism.ch`** |
|
||
| **9028** | podman **`koopa-paivana-silverbullet`** → Caddy **`silverbullet.hacktivism.ch`** (app backend `172.17.0.1:19128`) |
|
||
| **9029** | podman **`koopa-paivana-galene`** → Caddy **`galene.hacktivism.ch`** (app backend `172.17.0.1:19129`; UDP 10000–10099 still Galene) |
|
||
| **9030** | podman **`koopa-paivana-cryptpad`** → Caddy **`cryptpad.hacktivism.ch`** (edge backend `172.17.0.1:19130`) |
|
||
| **9031** | podman **`koopa-paivana-meet`** → Caddy **`meet.hacktivism.ch`** (app backend `172.17.0.1:19131`) |
|
||
| **9032** | podman **`koopa-bbb-front`** (Ubuntu) → Caddy **`bbb.hacktivism.ch`** |
|
||
| **9200** | podman **Forgejo git-SSH** (host-direct; not Caddy) |
|
||
| 9090–9092 | podman `koopa-tops-ng1` … `ng3` → Caddy `tops.ng{1,2,3}.hacktivism.ch` |
|
||
| 8080 | Tor ORPort |
|
||
|
||
VeciGate: WAN **80→9000**, WAN **443→9001**.
|
||
Public apps: Caddy vhosts on **9001** → 127.0.0.1:{9010–9015, 9020–9032, 9090–9092}.
|
||
Git SSH needs separate NAT/firewall **9200/tcp** if exposed to WAN.
|
||
Meet/Galene/BBB media UDP is separate from these HTTP ports.
|
||
|
||
| UDP range | Role |
|
||
|-----------|------|
|
||
| **10000–10099/udp** | **Galene** WebRTC (host publish + planned VeciGate DNAT → koopa) |
|
||
| (TBD) | Meet JVB / BBB media — allocate when Phase‑2 / full BBB leaves park |
|
||
|
||
| **1789** | podman **`koopa-nym`** mixnet (nym.com nym-node) |
|
||
| **1790** | podman **`koopa-nym`** verloc |
|
||
| **9080** | podman **`koopa-nym`** HTTP API (mapped from container 8080; Tor keeps **8080**) |
|
||
| **9180** | lab **`goa-regio-ng`** HTTP (loopback only; see `configs/lab-local/`) |
|
||
| **9322** | lab **`goa-regio-ng`** SSH/ansible (loopback only) |
|
||
| **8288** | lab **`mytops-local`** HTTP (loopback only) |
|
||
| **19000** | optional nym entry WS (gateway mode) |
|
||
| **51822/udp** | optional nym WireGuard (dVPN path) |
|
||
| **9180** | lab **`goa-regio-ng`** HTTP (loopback only; see `configs/lab-local/`) |
|
||
| **9322** | lab **`goa-regio-ng`** SSH/ansible (loopback only) |
|
||
| **8288** | lab **`mytops-local`** HTTP (loopback only) |
|