# surface-catalog.conf — known public Taler / GNUnet / Taler Systems hosts
# Format (whitespace-separated; # comments):
#   host   ports   expect_proto   label
# expect_proto: https | http | ssh | tcp | any
# ports: comma-separated (empty = defaults for proto)
#
# This list is expanded at runtime (DNS discovery, cert SANs, -d domain profile).
# Phase `surface` is NOT in default phases — run explicitly:
#   ./taler-monitoring.sh surface
#   ./taler-monitoring.sh -d hacktivism.ch surface

# --- taler.net ecosystem ---
www.taler.net                 443     https   taler-www
docs.taler.net                443     https   taler-docs
git.taler.net                 443,22  https   taler-git
bugs.taler.net                443     https   taler-bugs
lists.taler.net               443     https   taler-lists
tutorials.taler.net           443     https   taler-tutorials
mattermost.taler.net          443     https   mattermost
bank.demo.taler.net           443     https   demo-bank
exchange.demo.taler.net       443     https   demo-exchange
backend.demo.taler.net        443     https   demo-merchant
shop.demo.taler.net           443     https   demo-shop
bank.test.taler.net           443     https   test-bank
exchange.test.taler.net       443     https   test-exchange
backend.test.taler.net        443     https   test-merchant

# --- taler-ops / TOPS ---
www.taler-ops.ch              443     https   tops-www
taler-ops.ch                  443     https   tops-apex
bank.taler-ops.ch             443     https   tops-bank
exchange.taler-ops.ch         443     https   tops-exchange
my.taler-ops.ch               443     https   tops-merchant
stage.taler-ops.ch            443     https   tops-stage-www
stage.my.taler-ops.ch         443     https   tops-stage-merchant
exchange.stage.taler-ops.ch   443     https   tops-stage-exchange
nexus.stage.taler-ops.ch      443     https   tops-stage-nexus
shops.taler-ops.ch            443     https   tops-shops

# --- gnunet.org ---
www.gnunet.org                443,80  https   gnunet-www
gnunet.org                    443,80  https   gnunet-apex
git.gnunet.org                443,22  https   gnunet-git
bugs.gnunet.org               443     https   gnunet-bugs

# --- taler-systems.com ---
www.taler-systems.com         443     https   tsa-www
taler-systems.com             443     https   tsa-apex
# Anastasis / TSA mail plane (MX mail.anastasis.lu → pixel). Do NOT list
# anastasis.taler-systems.com — it does not resolve (was a catalog typo).
mail.anastasis.lu             443,25,465,587,143,993  https   anastasis-mail
pixel.taler-systems.com       443,25,465,587,143,993  https   pixel-mail

# --- mail (also covered by phase mail; listed for surface nmap/ports) ---
firefly.gnunet.org            443,25,465,587,143,993  https   firefly-mail

# --- common infra hostnames (remote only; may 404/redirect) ---
deb.taler.net                 443     https   deb-taler
ftp.gnu.org                   443     https   gnu-ftp