## Browser access and allowed addresses

The OpenRig daemon answers its API only when a request is addressed to this machine and, if it
comes from a web page, only when that page is the OpenRig UI or a page you allowed.

### What works with no setup

- The CLI, the TUI and agents on this machine, addressing the daemon by `localhost` or an IP
  address.
- Other OpenRig hosts and clients that reach this daemon by its IP address, its own hostname, or
  its own Tailscale name (for example `my-machine.your-tailnet.ts.net`, or the short `my-machine`).
  The daemon learns its own Tailscale name automatically from Tailscale on this machine.
- The web UI, when it is turned on (`rig config set ui.enabled true`, then restart the daemon) and
  opened over `http` on the daemon's own port at any address the daemon accepts, including its
  Tailscale name. A UI page served any other way, such as over `https` through your own domain,
  also needs its exact origin in `OPENRIG_ALLOWED_ORIGINS`, then a daemon restart.

### When you see a refusal

The daemon answers `403` with a sentence that says what to do. There are two kinds:

- **The address is not recognized** (`untrusted_host`). You reached the daemon by a name it does not
  know as its own, such as a custom DNS name, an alias in `/etc/hosts`, or a reverse proxy domain.
  Use `localhost`, an IP address or the machine's own name instead, or list the name you use:
  `OPENRIG_ALLOWED_HOSTS=rig.example.com` in the daemon's environment, then restart the daemon.
  A client that presents the daemon's configured bearer token is not refused for its address
  (it still needs whatever access each route requires).
- **The web page is not allowed** (`browser_origin_refused`). A browser page that is not the
  OpenRig UI at the daemon's own address called the API. This includes another local app or
  development server on a different port. To allow a page, list its exact origin:
  `OPENRIG_ALLOWED_ORIGINS=http://localhost:5173` in the daemon's environment, then restart the
  daemon. A bearer token does not override this.

`OPENRIG_ALLOWED_HOSTS` lists names you use to reach the daemon. `OPENRIG_ALLOWED_ORIGINS` lists
web pages allowed to call it. They are separate: a UI served through your own domain usually needs
both. Separate several entries with commas. Pages on other origins cannot read the refusal; the
message is for you, the CLI and agents.

### Limits

- If you rename the machine in Tailscale, the daemon keeps accepting its previous name until it
  restarts or until it next looks its name up after seeing an unrecognized one.
- If the daemon has not reached Tailscale's resolver since it started, its Tailscale name is
  refused until a lookup succeeds. A later failed lookup keeps the name it already learned.
  `localhost` and IP addresses keep working.
- This protects against unknown web pages and unknown names. It is not complete browser isolation:
  a page on another site can still cause a simple read request to an address the daemon accepts,
  although it cannot read the answer. Keep the daemon on loopback or your tailnet.