Allow cleartext HTTP for development (Tailscale/local IPs)

This commit is contained in:
James (ClawdBot) 2026-01-28 08:34:46 +00:00
parent 99e86390c4
commit e981f84c3c
1 changed files with 2 additions and 19 deletions

View File

@ -1,26 +1,9 @@
<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
<!-- Default: require HTTPS -->
<base-config cleartextTrafficPermitted="false">
<!-- Allow cleartext for development (Tailscale/local IPs) -->
<base-config cleartextTrafficPermitted="true">
<trust-anchors>
<certificates src="system" />
</trust-anchors>
</base-config>
<!-- Allow cleartext for local network (Tailscale) -->
<domain-config cleartextTrafficPermitted="true">
<!-- Tailscale CGNAT range -->
<domain includeSubdomains="true">100.64.0.0</domain>
<domain includeSubdomains="true">100.127.255.255</domain>
<!-- Local network -->
<domain includeSubdomains="true">192.168.0.0</domain>
<domain includeSubdomains="true">192.168.255.255</domain>
<domain includeSubdomains="true">10.0.0.0</domain>
<domain includeSubdomains="true">10.255.255.255</domain>
<!-- Localhost -->
<domain includeSubdomains="false">localhost</domain>
<domain includeSubdomains="false">127.0.0.1</domain>
</domain-config>
</network-security-config>