View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0010589 | Taler | deployment and operations | public | 2025-11-12 19:09 | 2026-09-19 14:43 |
| Reporter | vecirex | Assigned To | vecirex | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | low | Severity | feature | Reproducibility | N/A |
| Status | closed | Resolution | won't fix | ||
| Product Version | git (master) | ||||
| Target Version | 1.6 | Fixed in Version | 1.6 | ||
| Summary | 0010589: useful in deployment cases: systemd unit for proxying IPv4/IPv6 https traffic to ports > 1024 | ||||
| Description | Merchant or other operators of taler server components (e.g., exchanges) might find it useful to run unprivileged podman (or other) containers w/ TCP ports exposed > 1024 only. I've running code, but more checks needed for safe and productive usage; also to be made dynamic and tested on other systems (here it's SuSE GNU/Linux Tumbleweed): koopa:/var/lib/systemd # systemctl list-units | grep proxy https-proxy@8081.service loaded active running Proxy for incoming HTTPS traffic to port 8081 system-https\x2dproxy.slice loaded active active Slice /system/https-proxy https-proxy.socket loaded active running Forward incoming HTTPS traffic to local port 8081 koopa:/var/lib/systemd # nmap 127.0.0.1 | grep 8081 8081/tcp open blackice-icecap koopa:/var/lib/systemd # nmap -6 ::1 | grep 8081 8081/tcp open blackice-icecap koopa:/var/lib/systemd # ss -ltn sport = :443 State Recv-Q Send-Q Local Address:Port Peer Address:Port LISTEN 0 512 *:443 *:* koopa:/var/lib/systemd # | ||||
| Tags | No tags attached. | ||||
| To be committed to taler-deployment: https://git.taler.net/taler-deployment.git/ | |
| Low prio, we want those to use self-provisioning. | |
| Not needed anymore, mostly; can also be created automatically. | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2025-11-12 19:09 | vecirex | New Issue | |
| 2025-11-12 19:11 | vecirex | Note Added: 0026407 | |
| 2025-11-12 19:13 | vecirex | Assigned To | => vecirex |
| 2025-11-12 19:13 | vecirex | Status | new => assigned |
| 2025-11-12 19:20 | vecirex | Description Updated | |
| 2025-12-07 10:21 | Christian Grothoff | Priority | normal => low |
| 2025-12-07 10:21 | Christian Grothoff | Status | assigned => implementing |
| 2025-12-07 10:21 | Christian Grothoff | Target Version | => post-1.0 |
| 2025-12-07 10:21 | Christian Grothoff | Note Added: 0026804 | |
| 2026-08-31 17:47 | Florian Dold | Target Version | post-1.0 => Someday |
| 2026-09-02 15:30 | vecirex | Status | implementing => closed |
| 2026-09-02 15:30 | vecirex | Resolution | open => won't fix |
| 2026-09-02 15:30 | vecirex | Note Added: 0029828 | |
| 2026-09-19 14:43 | Christian Grothoff | Product Version | => git (master) |
| 2026-09-19 14:43 | Christian Grothoff | Fixed in Version | => 1.6 |
| 2026-09-19 14:43 | Christian Grothoff | Target Version | Someday => 1.6 |