From db8cc3026e707908f8aa3d18919b3ea528d80bd2 Mon Sep 17 00:00:00 2001
From: BoShen <14107297+Symbolk@users.noreply.github.com>
Date: Wed, 11 Mar 2026 16:21:06 +0800
Subject: [PATCH] Allow access for Tailscale IPs in HTTPS enforcement

---
 server.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/server.js b/server.js
index bf09317..c5bc8cc 100644
--- a/server.js
+++ b/server.js
@@ -357,6 +357,7 @@ function httpsEnforcement(req, res) {
   if (process.env.DASHBOARD_ALLOW_HTTP === 'true') return true;
   const ip = getClientIP(req);
   if (isLocalhost(ip)) return true;
+  if (isTailscaleIP(ip)) return true;
   if (req.socket.encrypted || req.headers['x-forwarded-proto'] === 'https') return true;
   setSecurityHeaders(res);
   res.writeHead(403, { 'Content-Type': 'text/plain' });