Hernâni Marques 4f092b90cc

release 1.4.1: generic docs and canonical install path

Docs use generic ops/outside-runner wording; install path ~/src/taler-monitoring.
VERSION 1.4.1 patch on top of the 1.4.0 scheme release.

2026-07-19 00:58:07 +02:00

2.8 KiB

Raw Permalink Blame History

Root on koopa (hacktivism monitoring sites)

Host Caddy runs as root/systemd (caddy user). Static monitoring HTML is not put into Taler containers — only host paths + Caddy handle.

After generate-monitoring-sites.sh + deploy-monitoring-sites.sh (as hernani), files live in:

/home/hernani/monitoring-sites-staging/<hostname>/monitoring/index.html
/home/hernani/monitoring-sites-staging/<hostname>/monitoring_err/index.html

One-shot as root (copy + Caddy)

# on koopa (koopa-external), as root:

# 1) web root
install -d -o caddy -g caddy -m 755 /var/www/monitoring-sites
rsync -a --delete /home/hernani/monitoring-sites-staging/ /var/www/monitoring-sites/
chown -R caddy:caddy /var/www/monitoring-sites

# 2) Caddyfile — from ~/koopa-caddy (host ops), then:
#    (either edit /etc/caddy/Caddyfile by hand using snippet below,
#     or copy full mirror after review)
#
#    install -m 644 /home/hernani/koopa-caddy/Caddyfile /etc/caddy/Caddyfile
#    # or: ~/koopa-caddy/apply.sh  after syncing Caddyfile into ~/koopa-caddy/

caddy validate --config /etc/caddy/Caddyfile
systemctl reload caddy
systemctl is-active caddy

Snippet per hacktivism site (inside each `*.hacktivism.ch { }` block)

Place before the catch-all reverse_proxy (same idea as /intro*):

    # Public taler-monitoring console HTML (static; host only)
    handle /monitoring_err* {
        root * /var/www/monitoring-sites/{host}
        rewrite * /monitoring_err{uri}
        # uri is /monitoring_err or /monitoring_err/ → serve directory index
        file_server
    }
    handle /monitoring* {
        root * /var/www/monitoring-sites/{host}
        file_server
    }

Simpler layout (recommended): path on disk matches URL under host root:

/var/www/monitoring-sites/bank.hacktivism.ch/monitoring/index.html
/var/www/monitoring-sites/bank.hacktivism.ch/monitoring_err/index.html

    handle_path /monitoring_err/* {
        root * /var/www/monitoring-sites/{host}/monitoring_err
        file_server
    }
    handle /monitoring_err {
        redir /monitoring_err/ 302
    }
    handle_path /monitoring/* {
        root * /var/www/monitoring-sites/{host}/monitoring
        file_server
    }
    handle /monitoring {
        redir /monitoring/ 302
    }

Canonical snippet is also in caddy-monitoring-handles.snippet and applied in configs/caddy/Caddyfile for the three GOA hosts.

Check

curl -sS -o /dev/null -w '%{http_code}\n' https://bank.hacktivism.ch/monitoring/
curl -sS -o /dev/null -w '%{http_code}\n' https://bank.hacktivism.ch/monitoring_err/
curl -sS https://bank.hacktivism.ch/monitoring_err/ | head

Not needed as root

Running taler-monitoring (use optional outside runner (SSH alias via FIRECUDA_SSH) / laptop)
Writing into podman Taler containers

2.8 KiB Raw Permalink Blame History