diff --git a/modules/core/caddy.nix b/modules/core/caddy.nix
index 7f4d811..b4eabec 100755
--- a/modules/core/caddy.nix
+++ b/modules/core/caddy.nix
@@ -156,7 +156,7 @@ EOF
       # ── RTL (LAN access) ────────────────────────────
       cat >> /run/caddy/Caddyfile <<EOF
 
-:3051 {
+http://127.0.0.1:3051, http://sovransystemsos.local:3051 {
   reverse_proxy :3050
   encode gzip zstd
 }
@@ -165,7 +165,7 @@ EOF
       # ── Mempool (LAN access) ────────────────────────
       cat >> /run/caddy/Caddyfile <<EOF
 
-:60847 {
+http://127.0.0.1:60847, http://sovransystemsos.local:60847 {
   reverse_proxy :60845
   encode gzip zstd
 }
diff --git a/modules/core/sovran-hub.nix b/modules/core/sovran-hub.nix
index fa83a94..88d2bb5 100644
--- a/modules/core/sovran-hub.nix
+++ b/modules/core/sovran-hub.nix
@@ -293,6 +293,5 @@ in
       };
     };
 
-    networking.firewall.allowedTCPPorts = [ 3051 8937 60847 ];
   };
 }