Tailscale https

[back-2-95]

I have uses tailscale add-on for a long time. I have Tailscale's domain name for my HA host and it has https.
So I can access my HA with https://homeassistant.tailREDACTED.ts.net/

Now I have a hard time to figure out how I can setup OpenClaw addon with https.

Currently I can access http://homeassistant.tailREDACTED.ts.net:18789/chat?session=main but there I have error message:

Disconnected from gateway.
disconnected (1008): control ui requires HTTPS or localhost (secure context)

[techartdev]

Hey @back-2-95 ! I'm just testing the next update, that will fix the tailscale issues. It's introducing new tailscale network mode that enables it to work, take a look here: techartdev/OpenClawHomeAssistant-dev#14

I will be merging with official repo in a few minutes.

For the http vs https case there is Allow Insecure HTTP Auth option in the Add-On Configuration, try to enable it.

[back-2-95]

Nice! How do I force update on add-on tho?

[techartdev]

@back-2-95 If update didn't appeared already go to Apps/AddOns, Install App, top right click the three dots and choose Check for updates.

[ImBada]

The update does not appear to be showing up in HAOS because the build number has not been refreshed. I have confirmed that this feature works by performing a reinstallation. but https isn't working.

[techartdev]

Guys new version was pushed and you should be able to update to it. It will bring up the latest OpenClaw which contains stability improvements.

Allow Insecure HTTP Auth only relaxes security checks for HTTP — it does not enable HTTPS by itself.

Misunderstanding is:
https://homeassistant..ts.net being HTTPS for HA does not automatically make :18789 HTTPS. That port is plain HTTP unless separately TLS-terminated.

[techartdev]

Ways to make this https could be:

A reverse proxy that terminates TLS for the OpenClaw port, not just HA’s main UI.

1. Tailscale Serve HTTPS (best for tailnet-only)
   • expose OpenClaw through Tailscale Serve as HTTPS
   • forward HTTPS endpoint -> http://127.0.0.1:18789 (or HA LAN IP)
   • then open the served https://... URL (no insecure auth toggle needed)

2. Nginx Proxy Manager / Caddy / Traefik in front
   • create HTTPS host (cert via Let’s Encrypt or internal cert)
   • proxy to http://:18789
   • use that HTTPS URL for OpenClaw

[ImBada]

I believe the more significant issue lies in the limitations of the HAOS Tailscale add-on (hassio-addons/app-tailscale). I am uncertain how to forward the endpoints. According to their documentation, "Only ports 443, 8443, and 10000 are allowed by Tailscale."