From bf818b9fa65307accc90b44581c24ddc52d92e70 Mon Sep 17 00:00:00 2001
From: jochens <jschoubben@gmail.com>
Date: Fri, 2 Oct 2026 01:10:13 +0200
Subject: [PATCH] route-proxy: tell the proxy the private network's range

The proxy serves internal names only to requests from the private network
and needs its range to know which those are (novox/hq issue 191).
---
 modules/route-proxy/module.json | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/modules/route-proxy/module.json b/modules/route-proxy/module.json
index 488c63b..6c6b7b2 100644
--- a/modules/route-proxy/module.json
+++ b/modules/route-proxy/module.json
@@ -80,6 +80,13 @@
       "mode": "0600",
       "content": "INTERNAL_ACME_DIRECTORY=https://${bound:internal-acme-ca:at}:${bound:internal-acme-ca:port}${bound:internal-acme-ca:path}\nINTERNAL_ACME_ROOTS=https://${bound:internal-acme-ca:at}:${bound:internal-acme-ca:port}${bound:internal-acme-ca:roots}\nINTERNAL_ACME_ROOTS_PATH=${bound:internal-acme-ca:roots}\n"
     },
+    {
+      "id": "internal-sources-env",
+      "type": "file",
+      "path": "${dir:state}/internal-sources.env",
+      "mode": "0600",
+      "content": "INTERNAL_SOURCES=${machine:mesh-range}\n"
+    },
     {
       "id": "trust",
       "type": "container",
@@ -132,7 +139,8 @@
       "network": "host",
       "env-file": [
         "${dir:state}/acme.env",
-        "${dir:state}/internal-acme.env"
+        "${dir:state}/internal-acme.env",
+        "${dir:state}/internal-sources.env"
       ],
       "volumes": [
         "${dir:routes-dir}:/routes:ro",
@@ -151,7 +159,8 @@
         "trust",
         "acme-env",
         "internal-trust",
-        "internal-acme-env"
+        "internal-acme-env",
+        "internal-sources-env"
       ]
     }
   ],