From dfe45bdbb214d725b193f9c7607dc98f04d54e81 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 3 Apr 2026 15:19:46 +0000
Subject: [PATCH 1/2] Initial plan


From e6cdb3b84000c579cc9cedaa0b2c2e3ef10d1199 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 3 Apr 2026 15:21:01 +0000
Subject: [PATCH 2/2] Add RTL and Mempool LAN reverse proxies, open firewall
 ports

Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/d29c1b82-a70e-4092-88c7-b521a1b3cac3

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
---
 modules/core/caddy.nix      | 18 ++++++++++++++++++
 modules/core/sovran-hub.nix |  4 ++--
 modules/mempool.nix         | 11 -----------
 3 files changed, 20 insertions(+), 13 deletions(-)

diff --git a/modules/core/caddy.nix b/modules/core/caddy.nix
index b7d885c..8293f12 100755
--- a/modules/core/caddy.nix
+++ b/modules/core/caddy.nix
@@ -144,6 +144,24 @@ $HAVEN {
 }
 EOF
       fi
+
+      # ── RTL (LAN access) ────────────────────────────
+      cat >> /run/caddy/Caddyfile <<EOF
+
+:3051 {
+  reverse_proxy :3050
+  encode gzip zstd
+}
+EOF
+
+      # ── Mempool (LAN access) ────────────────────────
+      cat >> /run/caddy/Caddyfile <<EOF
+
+:60847 {
+  reverse_proxy :60845
+  encode gzip zstd
+}
+EOF
     '';
   };
 }
diff --git a/modules/core/sovran-hub.nix b/modules/core/sovran-hub.nix
index 862a9b1..51f3526 100644
--- a/modules/core/sovran-hub.nix
+++ b/modules/core/sovran-hub.nix
@@ -42,7 +42,7 @@ let
       { name = "LND";                unit = "lnd.service";          type = "system"; icon = "lnd";          enabled = cfg.services.bitcoin;  category = "bitcoin-apps"; credentials = []; }
       { name = "Ride The Lightning"; unit = "rtl.service";          type = "system"; icon = "rtl";          enabled = cfg.services.bitcoin;  category = "bitcoin-apps"; credentials = [
         { label = "Tor Access"; file = "/var/lib/tor/onion/rtl/hostname"; prefix = "http://"; }
-        { label = "Local Network"; file = "/var/lib/secrets/internal-ip"; prefix = "http://"; suffix = ":3050"; }
+        { label = "Local Network"; file = "/var/lib/secrets/internal-ip"; prefix = "http://"; suffix = ":3051"; }
         { label = "Password"; file = "/etc/nix-bitcoin-secrets/rtl-password"; }
       ]; }
       { name = "BTCPayserver";       unit = "btcpayserver.service"; type = "system"; icon = "btcpayserver"; enabled = cfg.services.bitcoin;  category = "bitcoin-apps"; credentials = [
@@ -283,6 +283,6 @@ in
       };
     };
 
-    networking.firewall.allowedTCPPorts = [ 8937 ];
+    networking.firewall.allowedTCPPorts = [ 3051 8937 60847 ];
   };
 }
diff --git a/modules/mempool.nix b/modules/mempool.nix
index 5a6b1d3..51274e5 100755
--- a/modules/mempool.nix
+++ b/modules/mempool.nix
@@ -11,15 +11,4 @@ lib.mkIf config.sovran_systemsOS.features.mempool {
 
   nix-bitcoin.onionServices.mempool-frontend.enable = true;
 
-  services.caddy = {
-      virtualHosts = {
-          ":60847" = {
-              extraConfig = ''
-                  reverse_proxy :60845
-                  encode gzip zstd
-              '';
-          };
-      };
-  };
-
 }