History

Hernâni Marques 3d4d7251a5 bank: demo-withdraw API mints one-shot withdrawals from explorer pool		2026-07-10 20:09:35 +02:00
..
bonfire	docs: Bonfire guest local feed — outbox republish notes	2026-07-10 15:38:00 +02:00
caddy	scripts: caddy apply helper for koopa host Caddyfile	2026-07-10 15:37:42 +02:00
castopod	ops: castopod/bonfire notes; amount-ladder bench	2026-07-10 11:33:09 +02:00
monitoring	chore: layout scripts/monitoring + tor configs; host README	2026-06-30 22:06:55 +02:00
ops	scripts: sanity/dns/wallet-cli helpers; ops cleanup	2026-07-09 19:57:14 +02:00
taler-bank	bank: demo-withdraw API mints one-shot withdrawals from explorer pool	2026-07-10 20:09:35 +02:00
taler-dns	scripts: sanity/dns/wallet-cli helpers; ops cleanup	2026-07-09 19:57:14 +02:00
taler-exchange	configs: rename dirs to match live koopa containers	2026-07-10 16:02:52 +02:00
taler-landing	landing: deploy helpers for bank/exchange/merchant stats cron	2026-07-09 19:52:19 +02:00
taler-merchant	configs: rename dirs to match live koopa containers	2026-07-10 16:02:52 +02:00
taler-monitoring	taler-monitoring: document GOA shop e2e products	2026-07-10 20:07:37 +02:00
taler-sanity	configs: rename dirs to match live koopa containers	2026-07-10 16:02:52 +02:00
taler-shared	stats: mem snapshot w/o pipe (subshell lost counters → 0 B)	2026-07-10 11:11:06 +02:00
taler-wallet-cli	scripts: sanity/dns/wallet-cli helpers; ops cleanup	2026-07-09 19:57:14 +02:00
README.md	configs: rename dirs to match live koopa containers	2026-07-10 16:02:52 +02:00

README.md

Scripts

Dir	Source on koopa
`taler-merchant/`	podman `taler-hacktivism`: `/root`, `/usr/local/bin`
`taler-exchange/`	podman `taler-hacktivism-exchange-ansible`: `/root`, `/usr/local/bin`
`taler-hacktivism-bank/`	podman `taler-hacktivism-bank`: `/root`, `/usr/local/bin`
`taler-sanity/`	host root checks (stack, settlement, helpers)
`taler-monitoring/`	outside-in public URL walk (`/config` → keys/terms/integration/webui)
`ops/`	host hygiene (`cleanup-root-scratch.sh`)
`monitoring/`	host `/home/hernani/scripts` (tor relay stats)
`taler-wallet-cli/`	thin wrappers; benchmarks live in `../benchmarks/`
`castopod/`	host `hernani` podman-compose `~/koopa-castopod` — see `castopod/README.md`

Scratch: one-off probes live in local koopa-admin-log/.tmp/ (gitignored). See ops/ROOT_HYGIENE.md.

Secrets: never in this tree — sibling ../koopa-admin-secrets (koopa/host-root/<service>/ ↔ /root/ on host; containers/…/secrets/ for in-container).

Manual start model (all three)

root runs /root/start_base_services_for_taler_*.sh
→ Debian-style postgres perms + start (pg_ctlcluster / init.d)
→ (+ exchange: secmods/helpers; merchant: nginx)
→ interactive shell as service user
→ automation: add --no-shell then run step 2 via runuser
service user runs /usr/local/bin/start_*.sh [ --restart ]
→ application process only

Postgres ownership (Debian defaults, if cluster was root-owned after bad ops):

chown -R root:postgres /etc/postgresql
chmod confs 640 / dirs 755
chown -R postgres:postgres /var/lib/postgresql /var/log/postgresql /var/run/postgresql
# only remove postmaster.pid / socket locks when pg_isready fails and no live postgres
pg_ctlcluster 17 main start

Container	Root base	App start	App user
`taler-hacktivism`	`start_base_services_for_taler.sh`	`start_merchant.sh`	`taler-merchant-httpd`
`taler-hacktivism-exchange-ansible`	`start_base_services_for_taler_exchange.sh`	`start_exchange.sh`	`taler-exchange-httpd`

Exchange one-shots (root, offline / wire):
taler-exchange/wire-enable-and-upload.sh, offline-sign-upload-keys.sh, start_wire_helpers.sh | taler-hacktivism-bank | start_base_services_for_taler_bank.sh | start_bank.sh | libeufin-bank |

runuser -u USER -- bash (never -u with -s on util-linux).

SMS helper symlinks into /var/taler-src/... are not copied (merchant only).