From dde30f454b692fb2bc88795119ef6bfcb00f4fef Mon Sep 17 00:00:00 2001
From: Claude <claude@eom.dev>
Date: Sat, 7 Nov 2026 11:46:43 -0500
Subject: [PATCH] Reach monerod inside the cluster

Shkeeper's Monero module talks to monerod over plain HTTP only. Point it at
the in-cluster Service so that traffic never leaves the cluster; monerod's
RPC now accepts plain HTTP alongside HTTPS (ansible-role-monero).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 tasks/main.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tasks/main.yml b/tasks/main.yml
index 8442a9c..129c996 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -132,7 +132,8 @@
         fullnode:
           enabled: false
           monerod:
-            host: "monerod.eom.dev"
+            # In-cluster: Shkeeper uses plain HTTP to monerod, so keep it off the network.
+            host: "monerod.monero.svc.cluster.local"
             port: "18081"
             user: "{{ monerod_user }}"
             password: "{{ monerod_password }}"