From 4524e947bcc8bc5b466dfa1cedf96ec15ef43b4c Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sun, 15 Mar 2026 10:50:47 +0000
Subject: [PATCH 1/2] Initial plan


From 1825a769b8dff17c81653468487da7a4164812e3 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sun, 15 Mar 2026 10:52:01 +0000
Subject: [PATCH 2/2] Security: remove internal-tx-pool API and restrict faucet
 nginx proxy path

Co-authored-by: numbers-official <181934381+numbers-official@users.noreply.github.com>
---
 .../config.json                                                 | 1 -
 .../config.json                                                 | 1 -
 faucet/default                                                  | 2 +-
 3 files changed, 1 insertion(+), 3 deletions(-)

diff --git a/avalanchego/configs/chains/2PDRxzc6jMbZSTLb3sufkVszgQc2jtDnYZGtDTAAfom1CTwPsE/config.json b/avalanchego/configs/chains/2PDRxzc6jMbZSTLb3sufkVszgQc2jtDnYZGtDTAAfom1CTwPsE/config.json
index 029f07c..907e219 100644
--- a/avalanchego/configs/chains/2PDRxzc6jMbZSTLb3sufkVszgQc2jtDnYZGtDTAAfom1CTwPsE/config.json
+++ b/avalanchego/configs/chains/2PDRxzc6jMbZSTLb3sufkVszgQc2jtDnYZGtDTAAfom1CTwPsE/config.json
@@ -9,7 +9,6 @@
         "internal-eth",
         "internal-blockchain",
         "internal-transaction",
-	"internal-tx-pool",
         "debug-tracer"
     ]
 }
diff --git a/avalanchego/configs/chains/2oo5UvYgFQikM7KBsMXFQE3RQv3xAFFc8JY2GEBNBF1tp4JaeZ/config.json b/avalanchego/configs/chains/2oo5UvYgFQikM7KBsMXFQE3RQv3xAFFc8JY2GEBNBF1tp4JaeZ/config.json
index 7fe8927..cc323ec 100644
--- a/avalanchego/configs/chains/2oo5UvYgFQikM7KBsMXFQE3RQv3xAFFc8JY2GEBNBF1tp4JaeZ/config.json
+++ b/avalanchego/configs/chains/2oo5UvYgFQikM7KBsMXFQE3RQv3xAFFc8JY2GEBNBF1tp4JaeZ/config.json
@@ -9,7 +9,6 @@
 	"internal-eth",
 	"internal-blockchain",
 	"internal-transaction",
-	"internal-tx-pool",
 	"debug-tracer"
     ]
 }
diff --git a/faucet/default b/faucet/default
index 512ca58..993d15e 100644
--- a/faucet/default
+++ b/faucet/default
@@ -124,7 +124,7 @@ server {
 		try_files $uri $uri/ =404;
 	}
 
-	location /api/ {
+	location = /api/claim {
 		proxy_pass http://faucet;
 	}