Question: CORS Problems with Separate Dockers about headscale-ui

[routerino]

Are the certificates you using trusted by your computer or self signed? if the browser doesn't trust the certificates, it won't allow CORS.

Also what's the concern of having headscale-ui accessible by the internet? By design, having access to the application does not grant any benefit without knowing the API key.

[opoverlord]

Ah crud. Headscale has an LE cert, but the UI cert is caddy self signed. Will switch that up and give it a shot and ping back.

As for UI being accessible - really just attack surface reduction.

Thanks

[opoverlord]

Yep, that was it.

Thanks for the assist!