koopa-admin-log/configs/galene/README.md
2026-09-09 00:52:54 +02:00

1.5 KiB
Raw Blame History

Galene — SFU on CachyOS (koopa)

Item Value
Stack Galene
Image localhost/koopa-galene:cachyos (FROM docker.io/cachyos/cachyos)
Build Go from git tag GALENE_REF (default galene-0.96.3; no release tarballs)
Live dir /home/hernani/koopa-galene/
Container koopa-galene
Host port 9029 = Paivana paywall; Galene HTTP backend 127.0.0.1:19129 (-insecure)
Public site galene.hacktivism.ch

Build + up (koopa)

bash /path/to/koopa-admin-log/scripts/galene/build.sh
mkdir -p ~/koopa-galene && cp -a /path/to/koopa-admin-log/configs/galene/compose.yml ~/koopa-galene/
cd ~/koopa-galene && podman-compose up -d

Caddy

sudo bash /path/to/koopa-admin-log/scripts/caddy/caddy-apply.sh \
  --snippet /path/to/koopa-admin-log/configs/caddy/galene.hacktivism.ch.caddy \
  --site galene.hacktivism.ch --port 9029 --label galene

DNS + VeciGate for the hostname; WebRTC UDP ports documented when first room is live.

Notes

  • Volume ./data must not hide UI assets; entrypoint passes -static /opt/galene/static.
  • Example group: copy groups/hacktivism.json.example~/koopa-galene/data/groups/hacktivism.json (change op password).
  • WebRTC UDP: compose publishes 1000010099/udp; set the same range in VeciGate DNAT → koopa. Entrypoint uses -udp-range (GALENE_UDP_RANGE).
  • Built-in TURN (-turn auto) logs no public addresses until the host has a reachable public/mapped address; fix UDP/NAT first, then re-check logs.