3.1 KiB
Port map (see also host/overview/services.md)
| Port | Role |
|---|---|
| 22 | sshd (WAN often via VeciGate 23235) |
| 80 | systemd http-proxy.socket → Caddy 9000 |
| 443 | systemd https-proxy.socket → Caddy 9001 |
| 9000 | Caddy HTTP + ACME webroot |
| 9001 | Caddy HTTPS (vhosts) |
| 9010 | podman taler-hacktivism (merchant) |
| 9011 | podman taler-hacktivism-exchange-ansible (exchange) |
| 9012 | podman taler-hacktivism-bank (libeufin-bank) |
| 9013–9015 | bank / exchange / merchant public landings |
| 9020 | podman koopa-castopod → Caddy castopod.hacktivism.ch |
| 9021 | podman koopa-bonfire → Caddy bonfire.hacktivism.ch |
| 9022 | podman koopa-prime (Jellyfin) → Caddy prime.hacktivism.ch |
| 9023 | podman qBittorrent → Caddy bt.hacktivism.ch |
| 9024 | podman koopa-forgejo (HTTP) → Caddy git.hacktivism.ch |
| 9025 | podman koopa-paivana (portal paywall) → Caddy paivana.hacktivism.ch |
| 9026 | podman koopa-lemmy-proxy → Caddy lemmy.hacktivism.ch |
| 9027 | podman koopa-decidim → Caddy decidim.hacktivism.ch |
| 9028 | podman koopa-paivana-silverbullet → Caddy silverbullet.hacktivism.ch (app backend 127.0.0.1:19128) |
| 9029 | podman koopa-paivana-galene → Caddy galene.hacktivism.ch (app backend 127.0.0.1:19129; UDP 10000–10099 still Galene) |
| 9030 | podman koopa-paivana-cryptpad → Caddy cryptpad.hacktivism.ch (edge backend 127.0.0.1:19130) |
| 9031 | podman koopa-paivana-meet → Caddy meet.hacktivism.ch (app backend 127.0.0.1:19131) |
| 9032 | podman koopa-bbb-front (Ubuntu) → Caddy bbb.hacktivism.ch |
| 9200 | podman Forgejo git-SSH (host-direct; not Caddy) |
| 9090–9092 | podman koopa-tops-ng1 … ng3 → Caddy tops.ng{1,2,3}.hacktivism.ch |
| 8080 | Tor ORPort |
VeciGate: WAN 80→9000, WAN 443→9001.
Public apps: Caddy vhosts on 9001 → 127.0.0.1:{9010–9015, 9020–9032, 9090–9092}.
Git SSH needs separate NAT/firewall 9200/tcp if exposed to WAN.
Meet/Galene/BBB media UDP is separate from these HTTP ports.
| UDP range | Role |
|---|---|
| 10000–10099/udp | Galene WebRTC (host publish + planned VeciGate DNAT → koopa) |
| (TBD) | Meet JVB / BBB media — allocate when Phase‑2 / full BBB leaves park |
| 1789 | podman koopa-nym mixnet (nym.com nym-node) |
| 1790 | podman koopa-nym verloc |
| 9080 | podman koopa-nym HTTP API (mapped from container 8080; Tor keeps 8080) |
| 9180 | lab goa-regio-ng HTTP (loopback only; see configs/lab-local/) |
| 9322 | lab goa-regio-ng SSH/ansible (loopback only) |
| 8288 | lab mytops-local HTTP (loopback only) |
| 19000 | optional nym entry WS (gateway mode) |
| 51822/udp | optional nym WireGuard (dVPN path) |
| 9180 | lab goa-regio-ng HTTP (loopback only; see configs/lab-local/) |
| 9322 | lab goa-regio-ng SSH/ansible (loopback only) |
| 8288 | lab mytops-local HTTP (loopback only) |