From d7527a51f3bf44ee4c187782fb947be2a3869e43 Mon Sep 17 00:00:00 2001 From: Gabor Szabo Date: Tue, 19 May 2026 20:39:56 +0200 Subject: [PATCH] fix(api): allow Tailscale CGNAT origins in dev CORS allow-list (#246) --- app/main.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/app/main.py b/app/main.py index 3cb36c8e..0558ec6a 100644 --- a/app/main.py +++ b/app/main.py @@ -116,7 +116,9 @@ def create_app() -> FastAPI: r"localhost|127\.0\.0\.1|" r"10\.\d+\.\d+\.\d+|" r"192\.168\.\d+\.\d+|" - r"172\.(1[6-9]|2\d|3[0-1])\.\d+\.\d+" + r"172\.(1[6-9]|2\d|3[0-1])\.\d+\.\d+|" + # Tailscale CGNAT range (100.64.0.0/10) — dev-only remote access + r"100\.(6[4-9]|[7-9]\d|1[01]\d|12[0-7])\.\d+\.\d+" r")(:\d+)?$" if settings.is_development else None