54ebdb7d7a
Reflect host naming in git paths: - configs/taler-hacktivism/ (was taler-merchant) → container taler-hacktivism - configs/taler-hacktivism-bank/ (was taler-bank) → container …-bank, image taler-hacktivism-banking:live - configs/taler-exchange-ansible/ already matches …-exchange-ansible - configs/taler-exchange/ = conf inside that exchange container Update LIVE.md, README, ports/refs. No secret values.
92 lines
3.8 KiB
Markdown
92 lines
3.8 KiB
Markdown
# Live inventory — koopa (2026-07-10)
|
|
|
|
Snapshot of **what runs on host koopa** (openSUSE Tumbleweed). No secrets.
|
|
|
|
Refresh command ideas:
|
|
|
|
```bash
|
|
hostname; date -R
|
|
podman ps --format 'table {{.Names}}\t{{.Image}}\t{{.Status}}\t{{.Ports}}'
|
|
systemctl is-active caddy tor
|
|
ss -lntp | grep -E '90[0-9]{2}|9200|8080'
|
|
```
|
|
|
|
## Host
|
|
|
|
| Item | Value |
|
|
|------|--------|
|
|
| Hostname | `koopa` |
|
|
| Role | App host behind VeciGate (WAN :80→9000, :443→9001) |
|
|
| Edge | Caddy **9000/9001**, systemd socket proxies **80/443** |
|
|
| Tor | `tor.service` ORPort **8080**, ControlPort **9051** (localhost) |
|
|
|
|
## Running podman containers
|
|
|
|
| Name | Image | Ports (host) | Public site |
|
|
|------|--------|--------------|-------------|
|
|
| `taler-hacktivism` | `localhost/taler-hacktivism-live:landing` | **9010**, **9015** | `taler.hacktivism.ch` |
|
|
| **`taler-hacktivism-exchange-ansible`** | `localhost/taler-hacktivism-exchange-ansible:landing` | **9011**, **9014** | `exchange.hacktivism.ch` |
|
|
| `taler-hacktivism-bank` | **`localhost/taler-hacktivism-banking:live`** | **9012**, **9013** | `bank.hacktivism.ch` |
|
|
| `koopa-castopod` (+ mariadb, redis) | `castopod/castopod:1` | **9020** | `castopod.hacktivism.ch` |
|
|
| `koopa-bonfire` (+ postgres) | `bonfire:1.0.5-social-amd64` | **9021** | `bonfire.hacktivism.ch` |
|
|
| `koopa-prime-jellyfin` | `linuxserver/jellyfin:10.10.7` | **9022** | `prime.hacktivism.ch` |
|
|
| `koopa-prime-qbittorrent` | `linuxserver/qbittorrent:5.0.4` | **9023**, **6881** | `bt.hacktivism.ch` |
|
|
| `koopa-forgejo` (+ postgres) | `forgejo:11-rootless` | **9024**, **9200** | `git.hacktivism.ch` |
|
|
|
|
### Naming note (exchange)
|
|
|
|
Live exchange container is **`taler-hacktivism-exchange-ansible`** (not `taler-hacktivism-exchange-ansible` / not without `-ansible`).
|
|
Managed from **`/home/hernani/ansible-taler-exchange/`** (see `configs/taler-exchange-ansible/`).
|
|
|
|
## Caddy vhosts → backends
|
|
|
|
| Host | Backend |
|
|
|------|---------|
|
|
| `taler.hacktivism.ch` | 9010 (API) + 9015 (`/intro`) |
|
|
| `exchange.hacktivism.ch` | 9011 + 9014 (`/intro`) |
|
|
| `bank.hacktivism.ch` | 9012 + 9013 (`/intro`, terms, privacy) |
|
|
| `castopod.hacktivism.ch` | 9020 |
|
|
| `bonfire.hacktivism.ch` | 9021 |
|
|
| `prime.hacktivism.ch` | 9022 |
|
|
| `bt.hacktivism.ch` | 9023 |
|
|
| `git.hacktivism.ch` | 9024 (HTTP); git-SSH **9200** host-direct |
|
|
|
|
Config: `/etc/caddy/Caddyfile` (mirror `configs/caddy/Caddyfile`). Apply: `~/koopa-caddy/apply.sh`.
|
|
|
|
## Paths on host (`hernani`)
|
|
|
|
| Path | Role |
|
|
|------|------|
|
|
| `~/ansible-taler-exchange/` | Ansible + scripts for exchange-ansible container |
|
|
| `~/koopa-castopod/` | Castopod compose |
|
|
| `~/koopa-bonfire/` | Bonfire compose + gitbot |
|
|
| `~/koopa-prime/` | Jellyfin + qBittorrent |
|
|
| `~/koopa-forgejo/` | Forgejo rootless |
|
|
| `~/koopa-caddy/` | Desired Caddyfile + `apply.sh` |
|
|
|
|
## Start models
|
|
|
|
| Stack | How |
|
|
|-------|-----|
|
|
| Taler merchant/bank | root `start_base_services_*` → service user → `/usr/local/bin/start_*.sh` |
|
|
| Exchange (GOA) | `~/ansible-taler-exchange/run-container-koopa.sh` then `deploy-hacktivism-goa.sh` |
|
|
| User apps | `cd ~/koopa-* && podman-compose up -d` |
|
|
|
|
## Config mirrors in this repo (`configs/`)
|
|
|
|
| Live container | Git path |
|
|
|----------------|----------|
|
|
| `taler-hacktivism` | `configs/taler-hacktivism/` |
|
|
| `taler-hacktivism-bank` (image **…-banking**) | `configs/taler-hacktivism-bank/` |
|
|
| `taler-hacktivism-exchange-ansible` | `configs/taler-exchange-ansible/` + conf in `configs/taler-exchange/` |
|
|
|
|
## Related docs in this repo
|
|
|
|
| Topic | Doc |
|
|
|-------|-----|
|
|
| Ports | `configs/ports.md` |
|
|
| Diagram | `host/overview/services.md` |
|
|
| Exchange Ansible (koopa) | `configs/taler-exchange-ansible/` |
|
|
| Forgejo | `2026/2026-07-10--forgejo-rootless.md` |
|
|
| Bonfire public feeds | `configs/bonfire/public-feeds.md` |
|
|
| Castopod content | `2026/2026-07-09--castopod-content.md` |
|