Pi bundle: Kvitt on port 443 through NPM (D-124)

KVITT_PUBLIC_URL=https://${KVITT_PUBLIC_HOST} with no port; the health check through NPM prints the port-less URL; publish-apk.sh's summary drops :8443. README: no new router rule (the existing external 443 forward to the Home Assistant Pi serves Kvitt, NPM selects by name), NPM listens on 443, the fallback, operations and APK-abuse notes, and every :8443 URL. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01TQd3pEP9UeN2uifbHknQ7B
2026-10-19 20:22:11 +02:00
parent a86ad241f1
commit 4852803cdb
5 changed files with 32 additions and 27 deletions
@@ -30,7 +30,7 @@ services:
    environment:
      TZ: Europe/Stockholm
      KVITT_DATA_DIR: /data
-      KVITT_PUBLIC_URL: https://${KVITT_PUBLIC_HOST:?set KVITT_PUBLIC_HOST in .env}:8443
+      KVITT_PUBLIC_URL: https://${KVITT_PUBLIC_HOST:?set KVITT_PUBLIC_HOST in .env}
      # NPM's LAN address: only a request whose TCP peer is this address may set X-Forwarded-For, whose last entry
      # is then the client IP of the rate limits (SPEC §8.5, §8.6, D-120). An IP literal (install.sh checks it).
      KVITT_TRUSTED_PROXY: ${HA_HOST:?set HA_HOST in .env}