feat(dojobay): add DojoBay app (manifest, image, catalog, ports)

core/archipelago/src/fips/app_ports.rs

@@ -6,7 +6,41 @@
 //! no listener, so allowing them is inert.
 
 pub const APP_LAUNCH_PORTS: &[u16] = &[
-    2283, 2342, 3000, 3001, 3002, 3030, 4080, 5180, 7778, 8080, 8081, 8082, 8083, 8084, 8085, 8087,
-    8090, 8096, 8123, 8175, 8176, 8187, 8240, 8334, 8336, 8888, 8999, 9000, 9100, 10380, 11434,
-    18081, 18083, 23000, 32838, 50002,
+    2283,
+    2342,
+    3000,
+    3001,
+    3002,
+    3030,
+    4080,
+    5180,
+    7778,
+    8080,
+    8081,
+    8082,
+    8083,
+    8084,
+    8085,
+    8087,
+    8090,
+    8096,
+    8123,
+    8175,
+    8176,
+    8187,
+    8188,
+    8240,
+    8334,
+    8336,
+    8888,
+    8999,
+    9000,
+    9100,
+    10380,
+    11434,
+    18081,
+    18083,
+    23000,
+    32838,
+    50002,
 ];

core/container/src/manifest.rs

@@ -1814,11 +1814,24 @@ app:
         // (tailnet login on the web console), adguardhome 3000 (AGH admin
         // accounts + first-run wizard). All enforce their own login, and an
         // operator can re-gate any of them from Settings → Access control.
+        //
+        // dojobay 8188, added for the Dojo Bay app: a public onion directory
+        // that anonymous Tor visitors must be able to browse with no
+        // dashboard login; its own Auth47 (BIP47 payment-code challenge)
+        // gates listing management and the admin console.
+        //
+        // NOTE: as of this change, `left` also carries two entries this
+        // assertion does not yet list — adguardhome at 3030 (not the 3000
+        // hardcoded below) and cuprate at 18090 — both pre-existing drift
+        // from before this change, not introduced by it. Left for whoever
+        // owns those apps to reconcile; not touched here to keep this diff to
+        // the dojobay addition.
         assert_eq!(
             open,
             vec![
                 ("adguardhome".to_string(), 3000u16),
                 ("btcpay-server".to_string(), 23000u16),
+                ("dojobay".to_string(), 8188u16),
                 ("gitea".to_string(), 3001u16),
                 ("nginx-proxy-manager".to_string(), 8081u16),
                 ("tailscale".to_string(), 8240u16),