From 8d1f26c0c7ca94a8a2f911e2556a2f7b034019e1 Mon Sep 17 00:00:00 2001
From: anti <samuel@securejump.cl>
Date: Sun, 10 May 2026 02:31:08 -0400
Subject: [PATCH] fix(https): move Flask backend to 8443 to avoid netns
 conflict with http service on 8080

---
 decnet/templates/https/entrypoint.sh | 6 +++---
 decnet/templates/https/server.py     | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/decnet/templates/https/entrypoint.sh b/decnet/templates/https/entrypoint.sh
index 64e4a877..c162625d 100644
--- a/decnet/templates/https/entrypoint.sh
+++ b/decnet/templates/https/entrypoint.sh
@@ -62,7 +62,7 @@ cat > /etc/caddy/Caddyfile <<EOF
   tls ${CERT} ${KEY}
   route {
     decnet_fp
-    reverse_proxy 127.0.0.1:8080
+    reverse_proxy 127.0.0.1:8443
   }
 }
 EOF
@@ -75,12 +75,12 @@ python3 -c "
 import socket, sys, time
 for _ in range(80):
     try:
-        s = socket.create_connection(('127.0.0.1', 8080), timeout=0.25)
+        s = socket.create_connection(('127.0.0.1', 8443), timeout=0.25)
         s.close()
         sys.exit(0)
     except OSError:
         time.sleep(0.1)
-print('Flask did not bind to :8080 in time', file=sys.stderr)
+print('Flask did not bind to :8443 in time', file=sys.stderr)
 sys.exit(1)
 " || { echo 'Flask startup failed — aborting'; kill $FLASK_PID 2>/dev/null; exit 1; }
 
diff --git a/decnet/templates/https/server.py b/decnet/templates/https/server.py
index 2983a03d..afcc6620 100644
--- a/decnet/templates/https/server.py
+++ b/decnet/templates/https/server.py
@@ -32,7 +32,7 @@ logging.getLogger("werkzeug").setLevel(logging.ERROR)
 NODE_NAME     = os.environ.get("NODE_NAME", "webserver")
 SERVICE_NAME   = "https"
 LOG_TARGET    = os.environ.get("LOG_TARGET", "")
-PORT          = int(os.environ.get("PORT", "8080"))
+PORT          = int(os.environ.get("PORT", "8443"))
 
 _SERVER_CHOICES = [
     "Apache/2.4.41 (Ubuntu)",