From 72866d0044bc2931ac35ce3ca3bc885abf52e6aa Mon Sep 17 00:00:00 2001 From: Hermes Agent Date: Wed, 6 May 2026 18:50:09 +0000 Subject: [PATCH] fix: force plain HTTP on hermes-webui Tailscale proxy tailscale.com/https-only: 'false' still attempts TLS termination, causing ERR_SSL_PROTOCOL_ERROR when the backend speaks plain HTTP. Replaced with tailscale.com/ports: 'http:8080' to explicitly tell the operator to serve unencrypted HTTP on this port. --- apps/base/customer1/hermes-agent/open-webui-service.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/base/customer1/hermes-agent/open-webui-service.yaml b/apps/base/customer1/hermes-agent/open-webui-service.yaml index ddbedb5..c62ca41 100644 --- a/apps/base/customer1/hermes-agent/open-webui-service.yaml +++ b/apps/base/customer1/hermes-agent/open-webui-service.yaml @@ -8,7 +8,7 @@ metadata: tailscale.com/expose: "true" tailscale.com/hostname: "hermes-webui" tailscale.com/tags: "tag:k8s-operator" - tailscale.com/https-only: "false" + tailscale.com/ports: "http:8080" spec: type: ClusterIP selector: