From 539622817deef49d60b851a33527501656eb7bc0 Mon Sep 17 00:00:00 2001
From: Valentin Haudiquet <valentin.haudiquet@canonical.com>
Date: Sun, 23 Aug 2026 11:03:05 +0200
Subject: [PATCH] openclaw: enable http access

---
 kubernetes/personal/openclaw/openclaw-instance.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kubernetes/personal/openclaw/openclaw-instance.yaml b/kubernetes/personal/openclaw/openclaw-instance.yaml
index 61cba3c..facac0f 100644
--- a/kubernetes/personal/openclaw/openclaw-instance.yaml
+++ b/kubernetes/personal/openclaw/openclaw-instance.yaml
@@ -19,6 +19,11 @@ spec:
       className: traefik
       hosts:
         - host: openclaw.lan
+      security:
+        # Operator defaults forceHTTPS=true, which pins the Traefik router to
+        # the websecure entrypoint only (404 on plain HTTP). Disabled since
+        # this is a LAN-internal, token-auth-only endpoint without TLS.
+        forceHTTPS: false
       annotations:
         external-dns.alpha.kubernetes.io/enabled: "true"
   resources: