Sovran_Systems/Sovran_SystemsOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: Sovran_Systems:8dc3066f06ffc7b098bafff2e70d9c1ed96c2984
Branches Tags
Sovran_Systems:main Sovran_Systems:staging-dev Sovran_Systems:staging-release-candidate
..
compare: Sovran_Systems:c42962f6dabfcad16371b0d191954091fc0de839
Branches Tags
Sovran_Systems:staging-dev Sovran_Systems:main Sovran_Systems:staging-release-candidate

3 Commits
8dc3066f06 ... c42962f6da

Author SHA1 Message Date
Sovran_Systems
c42962f6da Merge pull request #73 from naturallaw777/copilot/remove-unnecessary-port-exposure 
Security: restrict RTL, Hub, and Mempool to LAN-only access
 2026-04-05 09:33:52 -05:00
copilot-swe-agent[bot]
7c047a16b7 Security: restrict RTL, Mempool ports to LAN-only; remove global firewall rules 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/1110322d-bc41-4d5d-9a4c-e5f7a5d2ef57

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-05 14:29:09 +00:00
copilot-swe-agent[bot]
a3b34ef74b Initial plan 2026-04-05 14:27:55 +00:00
2 changed files with 2 additions and 3 deletions
Expand all files Collapse all files

4
modules/core/caddy.nix
View File

@@ -156,7 +156,7 @@ EOF
# ── RTL (LAN access) ────────────────────────────
cat >> /run/caddy/Caddyfile <<EOF
:3051 {
http://127.0.0.1:3051, http://sovransystemsos.local:3051 {
reverse_proxy :3050
encode gzip zstd
}
@@ -165,7 +165,7 @@ EOF
# ── Mempool (LAN access) ────────────────────────
cat >> /run/caddy/Caddyfile <<EOF
:60847 {
http://127.0.0.1:60847, http://sovransystemsos.local:60847 {
reverse_proxy :60845
encode gzip zstd
}

1
modules/core/sovran-hub.nix
View File

@@ -293,6 +293,5 @@ in
};
};
networking.firewall.allowedTCPPorts = [ 3051 8937 60847 ];
};
}