2.3 KiB
2.3 KiB
Bonfire — FEDERATE + public guest access (2026-07-10)
Follow-up to ground zero: 2026-07-09--bonfire-ground-zero.md.
Change
| Item | Before | After |
|---|---|---|
.env FEDERATE |
unset | true |
| Container | recreated | podman-compose up -d --force-recreate web |
printenv FEDERATE (web) |
— | true |
HOSTNAME / compose |
bonfire.hacktivism.ch |
unchanged |
| Port | 9021 → Caddy | unchanged |
Only new env key vs ground-zero .env: FEDERATE.
Live: /home/hernani/koopa-bonfire/.env (mode 600).
Mirror: koopa-admin-secrets/koopa/home-hernani/koopa-bonfire/.env.
Compose mirror: configs/bonfire/compose.yml.
Intent
- Allow federation-related runtime paths (
FEDERATEconsumed in Bonfireruntime.exsastrue|yes|1). - Keep guest-readable public surfaces (no login required for explore / profiles that are already public).
- Operator stance: federation enablement is accepted as OK even if the UI banner lags.
Observed behaviour (after recreate)
| Check | Result |
|---|---|
Local http://127.0.0.1:9021/ |
200; guest UI (Explore / Log in) |
| Guest UI banner | still may show “Federation disabled” |
| App RPC (earlier probe) | activity_pub instance sometimes still federating: false, hostname: "localhost" despite env |
Public profile @foss |
public posts still visible (gitbot / FOSS content) |
| Front / local feed | can be sparse (“That’s all for the last 30 days…”) depending on boundaries / feed window |
So: env is set and container healthy; full ActivityPub “federating=true” in Application config may still need admin UI / deeper config if outbound federation is required later. Not blocking public profile timelines for guests.
Ops
cd ~/koopa-bonfire
grep ^FEDERATE= .env
podman exec koopa-bonfire printenv FEDERATE HOSTNAME
podman ps --filter name=koopa-bonfire
curl -sS -o /dev/null -w "%{http_code}\n" http://127.0.0.1:9021/
curl -sS -o /dev/null -w "%{http_code}\n" http://127.0.0.1:9021/@foss
Recreate web after env change:
cd ~/koopa-bonfire
set -a && source .env && set +a
podman-compose up -d --force-recreate web
Secrets / log rules
- Values only in
koopa-admin-secrets, not in this repo. - Daylog major bullet only (see
2026-07-10.md).