fix(apps): stabilize btcpay and public proxy launch flows

core/archipelago/src/api/rpc/package/config.rs

@@ -262,7 +262,7 @@ pub(super) fn get_health_check_args(app_id: &str, _rpc_pass: &str) -> Vec<String
         "bitcoin" | "bitcoin-core" | "bitcoin-knots" => return vec![],
         "lnd" => ("lncli getinfo || exit 1", "30s", "3"),
         "btcpay-server" | "btcpayserver" => {
-            ("curl -sf http://localhost:49392/ || exit 1", "30s", "3")
+            ("bash -ec '</dev/tcp/127.0.0.1/49392'", "30s", "3")
         }
         "mempool-api" => (
             http_probe_cmd("http://localhost:8999/api/v1/backend-info"),

core/archipelago/src/api/rpc/package/runtime.rs

@@ -874,6 +874,7 @@ async fn repair_before_package_start(container_name: &str) {
 }
 
 async fn repair_nginx_proxy_manager_container() {
+    repair_nginx_proxy_manager_dirs().await;
     if !nginx_proxy_manager_has_legacy_admin_port().await {
         cleanup_nginx_proxy_manager_ports().await;
         return;
@@ -890,6 +891,27 @@ async fn repair_nginx_proxy_manager_container() {
     }
 }
 
+async fn repair_nginx_proxy_manager_dirs() {
+    let _ = tokio::process::Command::new("sudo")
+        .args([
+            "mkdir",
+            "-p",
+            "/var/lib/archipelago/nginx-proxy-manager/data/letsencrypt-acme-challenge/.well-known/acme-challenge",
+            "/var/lib/archipelago/nginx-proxy-manager/letsencrypt",
+        ])
+        .output()
+        .await;
+    let _ = tokio::process::Command::new("sudo")
+        .args([
+            "chown",
+            "-R",
+            "1000:1000",
+            "/var/lib/archipelago/nginx-proxy-manager",
+        ])
+        .output()
+        .await;
+}
+
 async fn nginx_proxy_manager_has_legacy_admin_port() -> bool {
     if let Ok(output) = podman_control(&["port", "nginx-proxy-manager", "81/tcp"]).await {
         if output.status.success()
@@ -927,12 +949,21 @@ async fn recreate_nginx_proxy_manager_container() -> Result<()> {
         .args([
             "mkdir",
             "-p",
-            "/var/lib/archipelago/nginx-proxy-manager/data",
+            "/var/lib/archipelago/nginx-proxy-manager/data/letsencrypt-acme-challenge/.well-known/acme-challenge",
             "/var/lib/archipelago/nginx-proxy-manager/letsencrypt",
         ])
         .output()
         .await
         .context("failed to create nginx-proxy-manager data directories")?;
+    let _ = tokio::process::Command::new("sudo")
+        .args([
+            "chown",
+            "-R",
+            "1000:1000",
+            "/var/lib/archipelago/nginx-proxy-manager",
+        ])
+        .output()
+        .await;
 
     let image = crate::container::image_versions::pinned_image_for_app("nginx-proxy-manager")
         .unwrap_or_else(|| "docker.io/jc21/nginx-proxy-manager:latest".to_string());

core/archipelago/src/api/rpc/package/stacks.rs

@@ -587,7 +587,7 @@ impl RpcHandler {
         let images = [
             &format!("{}/postgres:15.17", REGISTRY),
             &format!("{}/nbxplorer:2.6.0", REGISTRY),
-            &format!("{}/btcpayserver:1.13.7", REGISTRY),
+            "docker.io/btcpayserver/btcpayserver:2.3.9",
         ];
         self.set_install_phase("btcpay-server", InstallPhase::PullingImage)
             .await;
@@ -743,7 +743,7 @@ impl RpcHandler {
                     "BTCPAY_POSTGRES=User ID=btcpay;Password={};Host=archy-btcpay-db;Port=5432;Database=btcpay;Include Error Detail=true",
                     db_pass
                 ),
-                &format!("{}/btcpayserver:1.13.7", REGISTRY),
+                "docker.io/btcpayserver/btcpayserver:2.3.9",
             ])
             .output()
             .await