docs: refresh tailscale http auth refs

This commit is contained in:
Peter Steinberger
2026-04-04 14:13:36 +01:00
parent 11b8a025a4
commit 07c7c4b9ec
6 changed files with 13 additions and 8 deletions

View File

@@ -105,7 +105,8 @@ Open:
Host-header origin fallback mode, but is a dangerous security downgrade.
- With Serve, Tailscale identity headers can satisfy Control UI/WebSocket auth
when `gateway.auth.allowTailscale` is `true` (no token/password required).
HTTP API endpoints still require token/password. Set
HTTP API endpoints do not use those Tailscale identity headers; they follow
the gateway's normal HTTP auth mode instead. Set
`gateway.auth.allowTailscale: false` to require explicit credentials. See
[Tailscale](/gateway/tailscale) and [Security](/gateway/security). This
tokenless flow assumes the gateway host is trusted.