From 7a23181b96defe19f2215599673638b7f3f7c325 Mon Sep 17 00:00:00 2001 From: Joachim Wiberg Date: Tue, 3 Mar 2026 22:33:21 +0100 Subject: [PATCH] board/common: serve network.local over plain HTTP (port 80) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit network.local is a discovery/browse page, not a management interface. Serving it over HTTP eliminates the self-signed certificate warning browsers show for .local mDNS names without changing the security posture of the actual device management pages (still HTTPS-only). The new port-80 server_name block takes precedence over the catch-all HTTP → HTTPS redirect in default.conf. Signed-off-by: Joachim Wiberg --- board/common/rootfs/etc/nginx/available/netbrowse.conf | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/board/common/rootfs/etc/nginx/available/netbrowse.conf b/board/common/rootfs/etc/nginx/available/netbrowse.conf index 49b4945b..c34850bd 100644 --- a/board/common/rootfs/etc/nginx/available/netbrowse.conf +++ b/board/common/rootfs/etc/nginx/available/netbrowse.conf @@ -1,3 +1,13 @@ +server { + listen 80; + listen [::]:80; + server_name network.local; + + location / { + include /etc/nginx/netbrowse.conf; + } +} + server { listen 443 ssl; listen [::]:443 ssl;