Under podman's pasta networking the container gets copies of the host's addresses, including its FIPS address, so relaying to the node's own npub connected back into the container and was refused (502). When the computed address is one of the container's own, send the request to the host's mapped address (host.containers.internal) instead. Other npubs still go straight over the mesh. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>