王性驊 00f6723588 HTTPS on the local network's own IP, with a certificate the server signs itself ... setup.sh offers 「區網 IP」 (alone, or next to Tailscale): Caddy serves https://<LAN IP> with its own small certificate authority (tls internal, default_sni for clients that send no name) and hands out the root at http://<LAN IP>/anybot-ca.crt for each device to trust once. docker-compose.lan.yml binds Caddy to that address only, so it sits beside tailscale serve. The app now accepts, for the account server, the certificates this computer trusts as well as the built-in public ones (HTTP and the WebSocket alike), so it connects once the root is trusted; before that it says what to install instead of "the certificate is wrong". Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Uirha2RVfSYmrhqNnqx9Z4		2026-11-07 21:27:07 +08:00
..
architecture.md	Each job works on its own tabs; a Lima VM the box lives in is started when it's down	2026-11-07 00:50:29 +08:00
install.md	One-step install: install.sh, fixed Linux and server builds, clearer README	2026-11-05 00:52:10 +08:00
multi-device.md	HTTPS on the local network's own IP, with a certificate the server signs itself	2026-11-07 21:27:07 +08:00
plan-2026-11-computer-use.md	Plan: smoother computer use and box logins that survive a rebuild	2026-11-06 22:06:49 +08:00
protocol.md	Remove what nothing uses and keep one copy of what was written several times	2026-11-05 23:21:47 +08:00
release.md	make, README and docs: build and install from source	2026-11-04 22:16:45 +08:00