docs: Add GoToSocial deployment to tracking files

- HISTORY.md: Entry #60 documenting GoToSocial v0.17.0 deployment
- WIP.md: Added to Just Completed section
- Includes HAProxy exposure, admin user setup, key fixes

Live at https://social.gk2.secubox.in

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

.claude/HISTORY.md

@@ -1362,3 +1362,36 @@ _Last updated: 2026-02-11_
       - Uses dropbear's dbclient with `-i` key and `-y` auto-accept
     - Updated ACL with 4 read methods and 4 write methods for remotes
     - Tested with moka1 (192.168.255.125) - MOCHAbin running OpenWrt 24.10.5
+
+60. **GoToSocial Fediverse Server Deployment (2026-02-13)**
+    - Deployed GoToSocial v0.17.0 ActivityPub server on C3BOX.
+    - **Installation**:
+      - Direct execution mode (no LXC - v0.18.0 has cgroup panics)
+      - Binary at `/srv/gotosocial/gotosocial` (ARM64)
+      - Data at `/srv/gotosocial/` (database, storage, web assets)
+      - Downloaded from Codeberg releases (GitHub redirects fail on wget)
+    - **Configuration**:
+      - Domain: `social.gk2.secubox.in`
+      - Port: 8484 (internal)
+      - SQLite database with WAL mode
+      - Web templates and assets from release tarball
+    - **Admin User Created**:
+      - Username: `admin`
+      - Email: `admin@secubox.in`
+      - Promoted to admin + moderator role
+    - **HAProxy Exposure**:
+      - Backend: `gotosocial` → `192.168.255.1:8484`
+      - Vhost: `social_gk2_secubox_in` with SSL redirect
+      - Uses wildcard certificate `*.gk2.secubox.in` (Let's Encrypt)
+      - Added domain to certs.list for SNI matching
+    - **UCI Configuration**:
+      - `haproxy.gotosocial` backend
+      - `haproxy.gotosocial_srv` server entry
+      - `haproxy.social_gk2_secubox_in` vhost
+      - `haproxy.cert_social_gk2_secubox_in` certificate
+      - `gotosocial.main.host`, `gotosocial.proxy.*` settings
+    - **Key Fixes**:
+      - Config.yaml paths: `/data/` → `/srv/gotosocial/`
+      - Backend address: HAProxy in LXC cannot reach 127.0.0.1, must use LAN IP
+      - WASM compilation: ~90 seconds on ARM64 at startup
+    - Live at: https://social.gk2.secubox.in

.claude/WIP.md

@@ -1,6 +1,6 @@
 # Work In Progress (Claude)
 
-_Last updated: 2026-02-13_
+_Last updated: 2026-02-13 (GoToSocial deployed)_
 
 > **Architecture Reference**: SecuBox Fanzine v3 — Les 4 Couches
 
@@ -64,6 +64,15 @@ _Last updated: 2026-02-13_
 
 ### Just Completed (2026-02-13)
 
+- **GoToSocial Fediverse Server** — DONE (2026-02-13)
+  - Deployed GoToSocial v0.17.0 ActivityPub server
+  - Direct execution mode (v0.18.0 has cgroup panics)
+  - Domain: `social.gk2.secubox.in` with wildcard SSL
+  - HAProxy exposure with backend to 192.168.255.1:8484
+  - Admin user created and promoted
+  - SQLite database, web assets configured
+  - Live at https://social.gk2.secubox.in
+
 - **Cloning Station Remote Device Management** — DONE (2026-02-13)
   - 6-tab tabbed interface: Overview, Remotes, Build, Console, History, Images
   - Remote device management via UCI and RPCD