From ed1548ea814b8bd83a6b617b85e98e0be2655b7b Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 4 Apr 2026 00:40:24 +0000
Subject: [PATCH] Add Avahi mDNS hostName override and Caddy .local block for
 sovransystemsos.local LAN access

Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/ca3945d7-a2cb-4121-bd89-a5e3fe31fc47

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
---
 configuration.nix      | 12 +++++++++++-
 modules/core/caddy.nix |  8 ++++++++
 2 files changed, 19 insertions(+), 1 deletion(-)

diff --git a/configuration.nix b/configuration.nix
index aca7b45..23b668d 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -35,11 +35,21 @@
   networking.networkmanager.enable = true;
   networking.firewall.enable = true;
   networking.firewall.allowedTCPPorts = [ 80 443 8448 3051 ];
-  networking.firewall.allowedUDPPorts = [ 80 443 8448 3051 ];
+  networking.firewall.allowedUDPPorts = [ 80 443 8448 3051 5353 ];
   networking.firewall.allowedUDPPortRanges = [
     { from = 49152; to = 65535; }
   ];
 
+  # ── Avahi (mDNS) ───────────────────────────────────────────
+  # Advertise as sovransystemsos.local on the LAN without changing the system
+  # hostname (which must remain "nixos" for flake compatibility — see above).
+  services.avahi = {
+    enable = true;
+    hostName = "sovransystemsos";
+    nssmdns4 = true;
+    publish = { enable = true; addresses = true; };
+  };
+
   # ── Locale / Time ──────────────────────────────────────────
   time.timeZone = "America/Los_Angeles";
   i18n.defaultLocale = "en_US.UTF-8";
diff --git a/modules/core/caddy.nix b/modules/core/caddy.nix
index 8293f12..7f4d811 100755
--- a/modules/core/caddy.nix
+++ b/modules/core/caddy.nix
@@ -145,6 +145,14 @@ $HAVEN {
 EOF
       fi
 
+      # ── Sovran Hub (LAN access via mDNS) ────────────
+      cat >> /run/caddy/Caddyfile <<EOF
+
+http://sovransystemsos.local {
+  reverse_proxy localhost:8937
+}
+EOF
+
       # ── RTL (LAN access) ────────────────────────────
       cat >> /run/caddy/Caddyfile <<EOF