From e981f84c3cbcba4c998979df704ccbaa14c9afdc Mon Sep 17 00:00:00 2001
From: "James (ClawdBot)" <johan@inou.com>
Date: Wed, 28 Jan 2026 08:34:46 +0000
Subject: [PATCH] Allow cleartext HTTP for development (Tailscale/local IPs)

---
 .../main/res/xml/network_security_config.xml  | 21 ++-----------------
 1 file changed, 2 insertions(+), 19 deletions(-)

diff --git a/app/src/main/res/xml/network_security_config.xml b/app/src/main/res/xml/network_security_config.xml
index 374e878..6fbbb58 100644
--- a/app/src/main/res/xml/network_security_config.xml
+++ b/app/src/main/res/xml/network_security_config.xml
@@ -1,26 +1,9 @@
 <?xml version="1.0" encoding="utf-8"?>
 <network-security-config>
-    <!-- Default: require HTTPS -->
-    <base-config cleartextTrafficPermitted="false">
+    <!-- Allow cleartext for development (Tailscale/local IPs) -->
+    <base-config cleartextTrafficPermitted="true">
         <trust-anchors>
             <certificates src="system" />
         </trust-anchors>
     </base-config>
-    
-    <!-- Allow cleartext for local network (Tailscale) -->
-    <domain-config cleartextTrafficPermitted="true">
-        <!-- Tailscale CGNAT range -->
-        <domain includeSubdomains="true">100.64.0.0</domain>
-        <domain includeSubdomains="true">100.127.255.255</domain>
-        
-        <!-- Local network -->
-        <domain includeSubdomains="true">192.168.0.0</domain>
-        <domain includeSubdomains="true">192.168.255.255</domain>
-        <domain includeSubdomains="true">10.0.0.0</domain>
-        <domain includeSubdomains="true">10.255.255.255</domain>
-        
-        <!-- Localhost -->
-        <domain includeSubdomains="false">localhost</domain>
-        <domain includeSubdomains="false">127.0.0.1</domain>
-    </domain-config>
 </network-security-config>