Skip to content

HTTPS-only rule blocks Ollama on the Docker host, and the error does not name the switch #69

Description

@oldeucryptoboi

Version: 2.0.0a1, commit 60609c8.

Where: packages/harborrag-adapters/src/harborrag_adapters/models/runtime/transport.py:47-52. Only localhost and loopback IPs count as local; every other plain-HTTP base URL is rejected when require_https_for_remote_endpoints is true (the default).

Symptom
The standard developer setup, Ollama on the host and the worker in Docker, uses http://host.docker.internal:11434. The worker crash-loops:

HarborEmbedConfigurationError: remote provider base URLs must use HTTPS

The switch exists (security.require_https_for_remote_endpoints: false plus security.allowed_base_url_hosts) but is not in the model configuration reference, and the error does not mention it.

Proposed fix
Treat host.docker.internal, host.lima.internal and gateway.docker.internal as local in transport.py; append the configuration key to the error message; document the switch in the model configuration reference.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions