chore: move default ports out of common-collision ranges

Previous defaults collided with well-trodden infra services and with
the Linux ephemeral port range:

- cortex API     8000 — common dev-server default (Django, minio UI)
- cortex metrics 9100 — Prometheus node_exporter default
- neuron API     9090 — Cockpit default on Fedora, Prometheus self

Move to helexa-themed palindromic ports, all below Linux's
32768-60999 ephemeral range and not registered to any well-known
service:

- cortex API     31313
- cortex metrics 31314
- neuron API     13131

Updated places:
- cortex.example.toml, neuron.example.toml defaults
- default impls in cortex-core and neuron config
- cortex-cli --endpoint default for the status subcommand
- doc comments citing example URLs
- README.md and CLAUDE.md snippets

Consumers already on the old ports need a one-line edit in their
/etc/cortex/cortex.toml or /etc/neuron/neuron.toml to match;
firewall rules and prometheus scrape configs will also need
updating.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.gitea/workflows/ci.yml

@@ -18,33 +18,38 @@ env:
   AWS_SECRET_ACCESS_KEY: ${{ secrets.SCCACHE_S3_SECRET_KEY }}
 
 jobs:
-  fmt:
-    name: Format
-    runs-on: rust
+  check:
+    name: Format, lint, build, test
+    runs-on: fedora
     steps:
       - uses: actions/checkout@v4
-      - run: cargo fmt --check --all
 
-  clippy:
-    name: Clippy
-    runs-on: rust
-    steps:
-      - uses: actions/checkout@v4
-      - run: cargo clippy --workspace -- -D warnings
-      - run: sccache --show-stats
+      - name: Ensure sccache with S3 support
+        env:
+          RUSTC_WRAPPER: ""
+        run: |
+          if sccache --version 2>/dev/null && sccache --show-stats 2>/dev/null; then
+            echo "sccache with S3 support already installed"
+          else
+            cargo install sccache --features s3 --locked
+          fi
 
-  test:
-    name: Test
-    runs-on: rust
-    steps:
-      - uses: actions/checkout@v4
-      - run: cargo test --workspace
-      - run: sccache --show-stats
+      - name: Check formatting
+        run: cargo fmt --check --all
+
+      - name: Clippy
+        run: cargo clippy --workspace -- -D warnings
+
+      - name: Test
+        run: cargo test --workspace
+
+      - name: Show sccache stats
+        run: sccache --show-stats
 
   srpm-cortex:
     name: Build cortex SRPM
-    runs-on: rpm
-    needs: [fmt, clippy, test]
+    runs-on: fedora
+    needs: check
     if: startsWith(github.ref, 'refs/tags/v')
     steps:
       - uses: actions/checkout@v4
@@ -103,8 +108,8 @@ jobs:
 
   srpm-neuron:
     name: Build neuron SRPM
-    runs-on: rpm
-    needs: [fmt, clippy, test]
+    runs-on: fedora
+    needs: check
     if: startsWith(github.ref, 'refs/tags/v')
     steps:
       - uses: actions/checkout@v4
@@ -163,7 +168,7 @@ jobs:
 
   copr-cortex:
     name: Publish cortex to COPR
-    runs-on: fedora-43
+    runs-on: fedora
     needs: srpm-cortex
     steps:
       - name: Download SRPM
@@ -180,7 +185,7 @@ jobs:
 
   copr-neuron:
     name: Publish neuron to COPR
-    runs-on: fedora-43
+    runs-on: fedora
     needs: srpm-neuron
     steps:
       - name: Download SRPM
@@ -197,7 +202,7 @@ jobs:
 
   bump-version:
     name: Bump version in source
-    runs-on: rust
+    runs-on: fedora
     needs: [copr-cortex, copr-neuron]
     steps:
       - uses: actions/checkout@v4

.gitignore

@@ -5,4 +5,3 @@
 .vscode/
 cortex.toml
 doc/plan/*
-script/deploy.sh

Cargo.lock

@@ -351,7 +351,7 @@ checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
 
 [[package]]
 name = "cortex-cli"
-version = "0.1.16"
+version = "0.1.12"
 dependencies = [
  "anyhow",
  "clap",
@@ -366,7 +366,7 @@ dependencies = [
 
 [[package]]
 name = "cortex-core"
-version = "0.1.16"
+version = "0.1.12"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -381,7 +381,7 @@ dependencies = [
 
 [[package]]
 name = "cortex-gateway"
-version = "0.1.16"
+version = "0.1.12"
 dependencies = [
  "anyhow",
  "axum",
@@ -1184,7 +1184,7 @@ dependencies = [
 
 [[package]]
 name = "neuron"
-version = "0.1.16"
+version = "0.1.12"
 dependencies = [
  "anyhow",
  "async-trait",

Cargo.toml

@@ -8,7 +8,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.1.16"
+version = "0.1.12"
 edition = "2024"
 license = "GPL-3.0-or-later"
 repository = "https://git.lair.cafe/helexa/cortex"

cortex.spec

@@ -1,5 +1,5 @@
 Name:           cortex
-Version:        0.1.16
+Version:        0.1.12
 Release:        1%{?dist}
 Summary:        Inference gateway for multi-node GPU clusters
 
@@ -21,7 +21,6 @@ BuildRequires:  systemd-rpm-macros
 
 Requires(pre):  shadow-utils
 Requires:       systemd
-Requires:       firewalld-filesystem
 
 # systemd-rpm-macros ships a unit dep generator that parses User=/Group=
 # from our .service file and emits Requires: user(cortex)/group(cortex).
@@ -57,7 +56,6 @@ cargo build --release -p cortex-cli
 install -Dm755 target/release/cortex %{buildroot}%{_bindir}/cortex
 install -Dm644 data/cortex.service %{buildroot}%{_unitdir}/cortex.service
 install -Dm644 data/cortex-sysusers.conf %{buildroot}%{_sysusersdir}/cortex.conf
-install -Dm644 data/cortex-firewalld.xml %{buildroot}%{_prefix}/lib/firewalld/services/cortex.xml
 install -dm755 %{buildroot}%{_sysconfdir}/cortex
 install -Dm644 cortex.example.toml %{buildroot}%{_sysconfdir}/cortex/cortex.toml
 install -Dm644 models.example.toml %{buildroot}%{_sysconfdir}/cortex/models.toml
@@ -80,21 +78,10 @@ install -Dm644 models.example.toml %{buildroot}%{_sysconfdir}/cortex/models.toml
 %{_bindir}/cortex
 %{_unitdir}/cortex.service
 %{_sysusersdir}/cortex.conf
-%{_prefix}/lib/firewalld/services/cortex.xml
 %dir %{_sysconfdir}/cortex
 %config(noreplace) %{_sysconfdir}/cortex/cortex.toml
 %config(noreplace) %{_sysconfdir}/cortex/models.toml
 
 %changelog
-* Thu Apr 16 2026 Gitea Actions <actions@git.lair.cafe> - 0.1.16-1
-- chore: ignore local deploy script
-- chore: move default ports out of common-collision ranges
-- ci: drop actions/cache for cargo registry and target
-
-* Thu Apr 16 2026 Gitea Actions <actions@git.lair.cafe> - 0.1.14-1
-- ci: publish both packages to a single helexa/helexa COPR project
-- fix(rpm): rename neuron package to helexa-neuron
-- ci: commit generated %changelog entries back to main
-
 * Wed Apr 15 2026 Rob Thijssen <grenade@rob.tn> - 0.1.0-1
 - Initial package

data/cortex-firewalld.xml

@@ -1,7 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<service>
-  <short>cortex</short>
-  <description>Cortex — inference gateway for multi-node GPU clusters</description>
-  <port protocol="tcp" port="31313"/>
-  <port protocol="tcp" port="31314"/>
-</service>

data/neuron-firewalld.xml

@@ -1,6 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<service>
-  <short>helexa-neuron</short>
-  <description>Neuron — per-node GPU discovery and harness daemon for cortex</description>
-  <port protocol="tcp" port="13131"/>
-</service>

helexa-neuron.spec

@@ -1,5 +1,5 @@
 Name:           helexa-neuron
-Version:        0.1.16
+Version:        0.1.12
 Release:        1%{?dist}
 Summary:        Per-node GPU discovery and harness management daemon for cortex
 # Package name disambiguates from Fedora's existing "neuron" package
@@ -24,7 +24,6 @@ BuildRequires:  systemd-rpm-macros
 
 Requires(pre):  shadow-utils
 Requires:       systemd
-Requires:       firewalld-filesystem
 
 # systemd-rpm-macros ships a unit dep generator that parses User=/Group=
 # from our .service file and emits Requires: user(neuron)/group(neuron).
@@ -59,7 +58,6 @@ cargo build --release -p neuron
 install -Dm755 target/release/neuron %{buildroot}%{_bindir}/neuron
 install -Dm644 data/neuron.service %{buildroot}%{_unitdir}/neuron.service
 install -Dm644 data/neuron-sysusers.conf %{buildroot}%{_sysusersdir}/neuron.conf
-install -Dm644 data/neuron-firewalld.xml %{buildroot}%{_prefix}/lib/firewalld/services/helexa-neuron.xml
 install -dm755 %{buildroot}%{_sysconfdir}/neuron
 install -Dm644 neuron.example.toml %{buildroot}%{_sysconfdir}/neuron/neuron.toml
 
@@ -81,20 +79,9 @@ install -Dm644 neuron.example.toml %{buildroot}%{_sysconfdir}/neuron/neuron.toml
 %{_bindir}/neuron
 %{_unitdir}/neuron.service
 %{_sysusersdir}/neuron.conf
-%{_prefix}/lib/firewalld/services/helexa-neuron.xml
 %dir %{_sysconfdir}/neuron
 %config(noreplace) %{_sysconfdir}/neuron/neuron.toml
 
 %changelog
-* Thu Apr 16 2026 Gitea Actions <actions@git.lair.cafe> - 0.1.16-1
-- chore: ignore local deploy script
-- chore: move default ports out of common-collision ranges
-- ci: drop actions/cache for cargo registry and target
-
-* Thu Apr 16 2026 Gitea Actions <actions@git.lair.cafe> - 0.1.14-1
-- ci: publish both packages to a single helexa/helexa COPR project
-- fix(rpm): rename neuron package to helexa-neuron
-- ci: commit generated %changelog entries back to main
-
 * Wed Apr 15 2026 Rob Thijssen <grenade@rob.tn> - 0.1.0-1
 - Initial package