3 replies

Tailscale Serve proxy headers not being trusted despite correct configuration

What I'm trying to do

Enable OpenClaw Control UI access via Tailscale Serve at https://xxx.tailcaxxxx.ts.
Expected behavior: browser should connect to the Control UI without "pairing required" error when accessing through the Tailscale URL.

What happened instead

WebSocket connection fails with:
⁨

   Proxy headers detected from untrusted address. Connection will not be treated as local. Configure gateway.trustedProxies to restore local client detection behind your proxy.
   closed before connect conn=... remote=127.0.0.1 fwd=xx.xx.xx.xx origin=https://xx.tailcacccc.ts.net host=xx.tailcaxxx.ts.net code=1008 reason=pairing required

   Proxy headers detected from untrusted address. Connection will not be treated as local. Configure gateway.trustedProxies to restore local client detection behind your proxy.
   closed before connect conn=... remote=127.0.0.1 fwd=xx.xx.xx.xx origin=https://xx.tailcacccc.ts.net host=xx.tailcaxxx.ts.net code=1008 reason=pairing required

⁩

Current config (/home/ubuntu/.openclaw/openclaw.json):
⁨

json  
   { 
    "gateway": {   
      "port": 18789,
      "mode": "local",  
      "bind": "loopback",
      "auth": {
    "mode": "token",
    "token": "xxx", 
    "allowTailscale": true
      }, 
      "trustedProxies": ["127.0.0.1", "::1"],
      "tailscale": {
    "mode": "serve",
    "resetOnExit": false 
      }  
    }
   }

json  
   { 
    "gateway": {   
      "port": 18789,
      "mode": "local",  
      "bind": "loopback",
      "auth": {
    "mode": "token",
    "token": "xxx", 
    "allowTailscale": true
      }, 
      "trustedProxies": ["127.0.0.1", "::1"],
      "tailscale": {
    "mode": "serve",
    "resetOnExit": false 
      }  
    }
   }

⁩

Steps taken:
1. Set gateway.trustedProxies: ["loopback"] → restarted → still failed
2. Changed to gateway.trustedProxies: ["127.0.0.1", "::1"] → restarted → still failed
3. Set gateway.auth.allowTailscale: true → restarted → still failed
4. Attempted pkill -f openclaw-gateway to force full restart

FotC�

Friends of the Crustacean 🦞🤝•2w ago•

3 replies

dguerrero

Tailscale Serve proxy headers not being trusted despite correct configuration

   Proxy headers detected from untrusted address. Connection will not be treated as local. Configure gateway.trustedProxies to restore local client detection behind your proxy.
   closed before connect conn=... remote=127.0.0.1 fwd=xx.xx.xx.xx origin=https://xx.tailcacccc.ts.net host=xx.tailcaxxx.ts.net code=1008 reason=pairing required

   Proxy headers detected from untrusted address. Connection will not be treated as local. Configure gateway.trustedProxies to restore local client detection behind your proxy.
   closed before connect conn=... remote=127.0.0.1 fwd=xx.xx.xx.xx origin=https://xx.tailcacccc.ts.net host=xx.tailcaxxx.ts.net code=1008 reason=pairing required

⁩

Current config (/home/ubuntu/.openclaw/openclaw.json):
⁨

json  
   { 
    "gateway": {   
      "port": 18789,
      "mode": "local",  
      "bind": "loopback",
      "auth": {
    "mode": "token",
    "token": "xxx", 
    "allowTailscale": true
      }, 
      "trustedProxies": ["127.0.0.1", "::1"],
      "tailscale": {
    "mode": "serve",
    "resetOnExit": false 
      }  
    }
   }

json  
   { 
    "gateway": {   
      "port": 18789,
      "mode": "local",  
      "bind": "loopback",
      "auth": {
    "mode": "token",
    "token": "xxx", 
    "allowTailscale": true
      }, 
      "trustedProxies": ["127.0.0.1", "::1"],
      "tailscale": {
    "mode": "serve",
    "resetOnExit": false 
      }  
    }
   }

Tailscale Serve proxy headers not being trusted despite correct configuration

Similar Threads

Tailscale Serve proxy headers not being trusted despite correct configuration

Similar Threads

Similar Threads

Similar Threads