Serve the shared Mempool explorer through the Angor indexer

apps/angor-indexer/README.md

@@ -1,7 +1,8 @@
 # Angor Indexer
 
-Headless mainnet API endpoint for Angor. The service reuses this node's Mempool
-backend and Electrum index instead of creating a second blockchain database.
+Mainnet indexer endpoint for Angor, serving the existing Mempool explorer at
+the same origin. The service reuses this node's Mempool frontend/backend and
+Electrum index instead of creating another explorer or blockchain database.
 An unpruned, fully synced Bitcoin node is required. Installing against a pruned
 node must show the existing archival-node requirement; it must never silently
 unprune or replace its Bitcoin data.
@@ -32,12 +33,45 @@ Install **Angor Relay** separately to host project metadata locally, then add
 clients. Its storage and configuration are separate from the node's internal
 relay; installing or uninstalling it does not change the internal relay.
 
+## Verify the complete client flow
+
+The root URL opens the Mempool explorer. `/health` and fee
+estimates establish API availability; they do not prove that project discovery,
+address history, or browser CORS works. Test a known funded project's address
+history, its original Nostr announcement, the Explore page, and project details
+in the actual Angor client. A certificate alone does not establish public routing.
+
+Keep existing discovery relays when adding a new relay. A new relay has no
+historical project data and does not automatically replicate other relays.
+Even with existing relays, an empty Explore page can be a client discovery
+failure: Angor Hub v2.0.0 was observed to stop after a batch whose announcements
+all failed on-chain validation. The same failure reproduced with our indexer
+and Angor's public indexer. Do not bypass the funding transaction's event-ID
+commitment or substitute an unsigned announcement to make a project appear.
+
+For opt-in read-only browser acceptance, install the frontend test dependencies
+and Playwright Chromium, then run:
+
+```sh
+ANGOR_TEST_INDEXER=https://indexer.example.com/ \
+ANGOR_TEST_RELAY=wss://relay.example.com/ \
+ANGOR_TEST_RELAYS='["wss://relay.angor.io","wss://relay.example.com/"]' \
+node tests/lifecycle/angor-public-browser.cjs
+```
+
+The relay under test must already contain the known original public project
+announcement documented in the test. The test does not import events, send
+funds, change your browser profile, or disable TLS verification. It checks the
+funding transaction/event commitment and real browser discovery and details.
+Relay signed writes, invalid-signature rejection, persistence, full node sync,
+and proxy upgrade/renewal tests remain separate acceptance requirements.
+
 ## Packaging
 
 Build the pinned image with:
 
 ```
-podman build -t source.archipelago-foundation.org/chaum/angor-indexer:1.0.1 apps/angor-indexer/container
+podman build -t source.archipelago-foundation.org/chaum/angor-indexer:1.0.2 apps/angor-indexer/container
 ```
 
 The image runs as UID 101 with a read-only root filesystem and no capabilities.
@@ -55,3 +89,21 @@ address query is indexed at the latest Bitcoin tip.
 Install Mempool Explorer first. The declarative `install_prerequisites` check
 refuses a new adapter installation if its Mempool API component is absent, before
 creating an installed-app record. It does not install or resync Bitcoin for you.
+
+## Explorer on the public indexer origin
+
+The linked official deployment guide exposes **Mempool frontend and API together**
+on the public indexer URL. It uses standard Mempool images and requires no custom
+Angor fork or `ANGOR_ENABLED` flag.
+
+The operator now requires that same browser experience: opening the configured
+indexer domain must show the existing Mempool explorer, while Angor API requests
+continue working on that origin. Reuse the existing Mempool stack, including its
+live WebSocket feed; do not install a second explorer or blockchain database.
+
+**Candidate 1.0.2:** `/` and frontend paths proxy to the existing Mempool
+frontend; `/api/`, `/api/v1/`, `/health` and the WebSocket feed retain their
+indexer routes. Version 1.0.1 served only service JSON at `/`. The candidate
+remains pending deployment/release acceptance, which must cover assets and deep links,
+desktop/mobile rendering, WebSocket updates, API/CORS/broadcast, trusted HTTPS,
+restart/upgrade and management-access isolation before documenting it as shipped.

apps/angor-indexer/container/nginx.conf

@@ -15,6 +15,14 @@ http {
         zone mempool_backend 64k;
         server mempool-api:8999 resolve;
     }
+    upstream mempool_frontend {
+        zone mempool_frontend 64k;
+        server mempool:8080 resolve;
+    }
+    map $http_upgrade $angor_connection_upgrade {
+        default upgrade;
+        '' close;
+    }
     server {
         listen 8080;
         client_max_body_size 4m;
@@ -23,7 +31,8 @@ http {
         proxy_send_timeout 30s;
         proxy_http_version 1.1;
         proxy_set_header Host $host;
-        proxy_set_header Connection "";
+        proxy_set_header Connection $angor_connection_upgrade;
+        proxy_set_header Upgrade $http_upgrade;
         proxy_set_header Authorization "";
         proxy_set_header Cookie "";
         proxy_hide_header Access-Control-Allow-Origin;
@@ -35,10 +44,6 @@ http {
         # Mempool's backend uses /api/v1. Match its frontend's shorter /api
         # surface too, without doubling already-versioned Angor URLs.
         rewrite ^/api/(?!v1/)(.*)$ /api/v1/$1 last;
-        location = / {
-            default_type application/json;
-            return 200 '{"service":"Angor Indexer","network":"mainnet","api":"/api/v1","health":"/health"}\n';
-        }
         # Readiness checks the indexing backend, not this gateway's process.
         location = /health {
             limit_except GET { deny all; }
@@ -54,10 +59,23 @@ http {
             limit_except GET POST { deny all; }
             proxy_pass http://mempool_backend;
         }
+        location = /api/v1/ws {
+            limit_except GET { deny all; }
+            proxy_read_timeout 600s;
+            proxy_send_timeout 600s;
+            proxy_pass http://mempool_backend;
+        }
         location /api/ {
             limit_except GET { deny all; }
             proxy_pass http://mempool_backend;
         }
-        location / { return 404; }
+        # Share the already-installed explorer; no second frontend or index DB.
+        # Its SPA handles transaction/block deep links and static assets.
+        location / {
+            limit_except GET { deny all; }
+            proxy_pass http://mempool_frontend;
+            proxy_intercept_errors on;
+            error_page 500 502 503 504 =503 @waiting;
+        }
     }
 }

apps/angor-indexer/manifest.yml

@@ -1,22 +1,26 @@
 app:
   id: angor-indexer
   name: Angor Indexer
-  version: 1.0.1
-  description: Headless Bitcoin indexer endpoint for Angor. Reuses this node’s Mempool
+  version: 1.0.2
+  description: Bitcoin indexer endpoint for Angor with the existing Mempool explorer.
+    Reuses this node’s Mempool
     and Electrum index; requires a synced, unpruned Bitcoin node. Add this service’s
     address as the custom indexer in Angor settings. A relay is optional and installed
     separately.
   category: money
   install_prerequisites:
+  - mempool
   - mempool-api
   upstream:
     kind: github
     repo: block-core/angor
   container:
-    image: source.archipelago-foundation.org/chaum/angor-indexer:1.0.1
+    image: source.archipelago-foundation.org/chaum/angor-indexer:1.0.2
     pull_policy: if-not-present
     network: archy-net
   dependencies:
+  - app_id: mempool
+    version: '>=3.0.0'
   - app_id: mempool-api
     version: '>=3.0.0'
   - bitcoin:archival
@@ -40,8 +44,8 @@ app:
   interfaces:
     main:
       name: Angor Indexer API
-      description: Use this origin as Angor’s custom mainnet indexer URL. HTTPS is
-        required for browser clients.
+      description: Use this origin as Angor’s custom mainnet indexer URL, or open it
+        to view the existing Mempool explorer. HTTPS is required for browser clients.
       type: api
       port: 8998
       protocol: http
@@ -63,6 +67,7 @@ app:
     repo: https://github.com/block-core/angor
     features:
     - Angor mainnet API
+    - Mempool explorer on the same origin
     - Reuses existing Mempool indexing
     - No separate blockchain database
     - Optional independent relay

apps/angor-relay/README.md

@@ -8,6 +8,18 @@ this is a public relay, not a private messaging archive. It mounts only
 `/var/lib/archipelago/angor-relay` and its separate configuration directory.
 It never opens, reconfigures or shares the node's internal strfry database.
 
+For a public domain, proxy HTTPS to node port **8091**, enable WebSocket upgrade,
+and add `wss://your-relay-domain/` in Angor. Test both NIP-11 metadata (send
+`Accept: application/nostr+json`) and a real Nostr subscription over WSS. An
+Archipelago login page at this domain is a routing failure, not relay readiness.
+
+New relays start without project history. Keep existing discovery relays alongside
+yours until the needed original signed announcements and metadata are available
+locally. Relays do not automatically synchronize. Any history import must retain
+the original event IDs and signatures; verify funded projects against their
+on-chain commitments. A working WebSocket with zero stored events is not proof
+that the client's project discovery works. See the indexer README's browser test.
+
 The configuration is seeded only when absent, preserving operator changes.
 Stop the service before making a consistent backup of its event database.
 Ordinary start/restart/recreation preserves both mounts. Use the standard app