koopa-admin-log/2026/2026-07-10--bonfire-federate.md

61 lines
2.3 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Bonfire — FEDERATE + public guest access (2026-07-10)
Follow-up to ground zero: `2026-07-09--bonfire-ground-zero.md`.
## Change
| Item | Before | After |
|------|--------|--------|
| `.env` `FEDERATE` | unset | **`true`** |
| Container | recreated | `podman-compose up -d --force-recreate web` |
| `printenv FEDERATE` (web) | — | `true` |
| `HOSTNAME` / compose | `bonfire.hacktivism.ch` | unchanged |
| Port | **9021** → Caddy | unchanged |
Only new env key vs ground-zero `.env`: **`FEDERATE`**.
Live: `/home/hernani/koopa-bonfire/.env` (mode 600).
Mirror: `koopa-admin-secrets/koopa/home-hernani/koopa-bonfire/.env`.
Compose mirror: `configs/bonfire/compose.yml`.
## Intent
- Allow federation-related runtime paths (`FEDERATE` consumed in Bonfire `runtime.exs` as `true|yes|1`).
- Keep **guest-readable** public surfaces (no login required for explore / profiles that are already public).
- Operator stance: **federation enablement is accepted as OK** even if the UI banner lags.
## Observed behaviour (after recreate)
| Check | Result |
|-------|--------|
| Local `http://127.0.0.1:9021/` | 200; guest UI (Explore / Log in) |
| Guest UI banner | still may show **“Federation disabled”** |
| App RPC (earlier probe) | `activity_pub` instance sometimes still `federating: false`, `hostname: "localhost"` despite env |
| Public profile `@foss` | public posts still visible (gitbot / FOSS content) |
| Front / local feed | can be sparse (“Thats all for the last 30 days…”) depending on boundaries / feed window |
So: **env is set and container healthy**; full ActivityPub “federating=true” in Application config may still need admin UI / deeper config if outbound federation is required later. Not blocking public profile timelines for guests.
## Ops
```bash
cd ~/koopa-bonfire
grep ^FEDERATE= .env
podman exec koopa-bonfire printenv FEDERATE HOSTNAME
podman ps --filter name=koopa-bonfire
curl -sS -o /dev/null -w "%{http_code}\n" http://127.0.0.1:9021/
curl -sS -o /dev/null -w "%{http_code}\n" http://127.0.0.1:9021/@foss
```
Recreate web after env change:
```bash
cd ~/koopa-bonfire
set -a && source .env && set +a
podman-compose up -d --force-recreate web
```
## Secrets / log rules
- Values only in **`koopa-admin-secrets`**, not in this repo.
- Daylog major bullet only (see `2026-07-10.md`).