koopa-admin-log

Ops log and config mirror for host koopa (openSUSE Tumbleweed).

Day logs: 2026/ (major only, written same day). Topic notes: YYYY-MM-DD--topic.md.

Secrets: not in this repo — see SECRETS.md and sibling koopa-admin-secrets.

Git origin

origin	https://git.hacktivism.ch/hernani/koopa-admin-log.git
Web	https://git.hacktivism.ch/hernani/koopa-admin-log
SSH	ssh://git@git.hacktivism.ch:9200/hernani/koopa-admin-log.git

Hosted on Forgejo rootless (this host). See 2026/2026-07-10--admin-log-origin-forgejo.md.

Layout

host/                      # openSUSE host-level config + overview
  overview/services.md     # graphical service map
  systemd/ firewalld/ caddy/ network/
configs/                   # mirrored app configs (caddy, taler, forgejo, …)
  taler-merchant/          # overrides + nginx (same tree style as exchange)
  taler-exchange/          # overrides + coins
  forgejo/                 # rootless git.hacktivism.ch
scripts/                   # merchant, exchange, monitoring helpers
  taler-merchant/          # merchant-model start scripts
  taler-exchange/          # same model; archive/ = greenfield bootstrap
2026/                      # day logs + dated topic notes

Live containers (podman)

Name	Image / role	Host port
taler-hacktivism	merchant	9010
taler-exchange-hacktivism	exchange	9011
taler-bank-hacktivism	libeufin-bank (GOA, no IBAN)	9012
koopa-castopod (+ mariadb/redis)	Castopod Fediverse podcast	9020
koopa-bonfire (+ postgres)	Bonfire social	9021
koopa-prime (Jellyfin)	media	9022
qBittorrent (prime stack)	torrents	9023
koopa-forgejo (+ postgres)	Forgejo rootless git	9024 (+ SSH 9200)

Start model (Taler): root /root/start_base_services_* → shell as service user → /usr/local/bin/start_*.sh [--restart].
Start model (user apps): hernani → cd ~/koopa-{castopod,bonfire,prime,forgejo} && podman-compose up -d.

Public hosts: taler. / exchange. / bank. / castopod. / bonfire. / prime. / bt. / git.hacktivism.ch
(Caddy → 9010–9015 / 9020–9024; git-SSH host 9200 direct).

Service details: configs/taler-*, configs/forgejo/, scripts/*.
Host-wide picture: host/overview/services.md.
Port table: configs/ports.md.
Router: ../vecigate-admin-log.

Benchmarks (drive from the local machine, measure on koopa): benchmarks/
→ amount ladder: benchmarks/amount-ladder/.

Exchange snapshot/restore (GOA, local images only):
→ 2026/2026-07-09--exchange-snapshot-and-restore.md

Exchange /keys + Wire + bank account (diagram):
configs/taler-exchange/README.md (section "/keys, Wire and Account").

Castopod pilot content (FOSS Airwaves, user ngi, free licenses):
2026/2026-07-09--castopod-content.md → https://castopod.hacktivism.ch/

Bonfire FEDERATE + guest public (2026-07-10):
2026/2026-07-10--bonfire-federate.md → https://bonfire.hacktivism.ch/
(ground zero: 2026/2026-07-09--bonfire-ground-zero.md)

Forgejo rootless (git.hacktivism.ch, no free registration, SSH :9200):
2026/2026-07-10--forgejo-rootless.md → https://git.hacktivism.ch/