From 6584b63c36172f6969e65329f58c2449f79075e8 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sun, 5 Apr 2026 14:43:49 +0000
Subject: [PATCH] Revert commit 7c047a1: restore LAN access to Hub, RTL, and
 Mempool

Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/c92f1a7f-7c42-44f1-a86d-089383bafc94

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
---
 modules/core/caddy.nix      | 4 ++--
 modules/core/sovran-hub.nix | 2 ++
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/modules/core/caddy.nix b/modules/core/caddy.nix
index b4eabec..7f4d811 100755
--- a/modules/core/caddy.nix
+++ b/modules/core/caddy.nix
@@ -156,7 +156,7 @@ EOF
       # ── RTL (LAN access) ────────────────────────────
       cat >> /run/caddy/Caddyfile <<EOF
 
-http://127.0.0.1:3051, http://sovransystemsos.local:3051 {
+:3051 {
   reverse_proxy :3050
   encode gzip zstd
 }
@@ -165,7 +165,7 @@ EOF
       # ── Mempool (LAN access) ────────────────────────
       cat >> /run/caddy/Caddyfile <<EOF
 
-http://127.0.0.1:60847, http://sovransystemsos.local:60847 {
+:60847 {
   reverse_proxy :60845
   encode gzip zstd
 }
diff --git a/modules/core/sovran-hub.nix b/modules/core/sovran-hub.nix
index 88d2bb5..7635d0f 100644
--- a/modules/core/sovran-hub.nix
+++ b/modules/core/sovran-hub.nix
@@ -293,5 +293,7 @@ in
       };
     };
 
+    networking.firewall.allowedTCPPorts = [ 3051 8937 60847 ];
+
   };
 }