ix ckpool.conf render dropping the TLS bind port; Let deployments declare what each stratum bind is

ckpool/entrypoint.sh

@@ -49,6 +49,11 @@ LOGDIR="${LOGDIR:-/var/log/ckpool}"
 SOCKET_DIR="${SOCKET_DIR:-/run/ckpool}"
 SHARE_LOG="${SHARE_LOG:-1}"
 CKPOOL_LOGLEVEL="${CKPOOL_LOGLEVEL:-6}"
+# ckpool's second, loopback-only stratum bind. Nothing terminates TLS in the
+# dev compose stack, but the bind must still resolve: ckpool passes the port
+# straight to getaddrinfo() and a non-numeric service string is fatal
+# (connector.c logs "Failed to extract resolved url" and exit(1)s).
+TLS_INTERNAL_PORT="${TLS_INTERNAL_PORT:-3437}"
 
 mkdir -p "$LOGDIR" "$SOCKET_DIR"
 
@@ -68,6 +73,7 @@ sed \
     -e "s|\${BLOCKPOLL_MS}|${BLOCKPOLL_MS}|g" \
     -e "s|\${UPDATE_INTERVAL_S}|${UPDATE_INTERVAL_S}|g" \
     -e "s|\${STRATUM_PORT}|${STRATUM_PORT}|g" \
+    -e "s|\${TLS_INTERNAL_PORT}|${TLS_INTERNAL_PORT}|g" \
     -e "s|\${MINDIFF}|${MINDIFF}|g" \
     -e "s|\${STARTDIFF}|${STARTDIFF}|g" \
     -e "s|\${MAXDIFF}|${MAXDIFF}|g" \