HTTPS is now the default

[cmac86]

Starting with the merge of PR #55, HTTPS is enabled by default for all deployment modes (GPU, CPU, Apple Silicon). You no longer need --profile https.

Why

Browsers block microphone access on HTTP unless you're on localhost. This means voice only worked from the host machine by default — any other device on your LAN couldn't use the mic. Most users need HTTPS anyway, so it's now the default.

What changed

• nginx always starts with auto-generated self-signed certificates
• --profile https is no longer needed (but won't break if you still pass it)
• The only required config is CAAL_HOST_IP in .env
• HTTPS_DOMAIN is only needed for Tailscale (where domain differs from IP)
• Default Ollama URL changed to http://host.docker.internal:11434 (works inside Docker)

What you need to do

Nothing, if you were already using --profile https — just drop the flag.

If you were using HTTP only:

1. Pull the latest changes
2. Run docker compose up -d (same as before)
3. Access https://YOUR_IP:3443 instead of http://YOUR_IP:3000
4. Accept the self-signed certificate warning on first visit

If you have scripts or aliases with --profile https:
They still work, but you can remove the flag.

See PR #55 for full details.

[AbdulShahzeb]

Default Ollama URL changed to http://host.docker.internal:11434 (works inside Docker)

Thank you for this! I kept forgetting the Docker hostname xD