Resolving Disconnection Issues in OpenClaw Control UI

If you're working with OpenClaw and encounter the 'Disconnected (1008): control ui requires HTTPS or localhost (secure context)' error, you're not alone. This issue often arises when attempting to run the interface on a Hostinger VPS, as outlined in a user query on Reddit.
The core of this issue is that the control UI requires a secure connection provided by HTTPS or localhost, but your setup might be using HTTP. To restore access, you have a few options:
Solution Options
- Switch to HTTPS: Implement HTTPS using a tool like Tailscale Serve. This involves setting up Tailscale on your VPS to create a secure connection, ultimately preventing your browser from blocking the device identity.
- Use Localhost: If possible, run the application on localhost by visiting
http://127.0.0.1:18789directly on the gateway host. - Allow Insecure HTTP Auth: For those who need to stay on HTTP, modify the configuration to allow insecure authentication. This involves setting
gateway.controlUi.allowInsecureAuth: truein the configuration file, though this should only be done with care as it reduces your security posture.
Practical Steps
Start by determining which solution best fits your environment:
- For HTTPS: Follow the Tailscale Serve documentation to configure HTTPS access.
- For Localhost: Ensure your application and the machine accessing it are both on the same network, then open the specified URL.
- For Insecure HTTP: Update your VPS configuration file to include
gateway.controlUi.allowInsecureAuth: true. Be sure you understand the security implications.
This needs some configuration on your VPS. You'll typically be editing a configuration file, often found either in your project's directory or a system-wide configuration path depending on your setup.
📖 Read the full source: r/clawdbot
👀 See Also

Guide: Deploying OpenClaw with llama.cpp on GEEKOM IT15 Mini PC
A technical walkthrough details switching OpenClaw from Ollama to llama.cpp to run a local Qwen3-8B model with Intel Arc GPU acceleration, covering configuration changes, manual server management, and troubleshooting common pitfalls.

Three Essential OpenClaw Skills for a Stable Setup: Memory, Security, and Discovery
A Reddit post recommends installing three specific types of OpenClaw skills first: a memory fix skill to prevent context loss, a local security vetting skill to check for malicious code, and a curated discovery hub to find maintained tools.

72-Step Claude Setup Checklist: From Default to Power User
A detailed medium article outlines a 72-step checklist for configuring Claude, moving from default settings to advanced power-user features. Shared on HN with 10 points and 1 comment.

Practical Framework for Choosing Between Claude's Haiku, Sonnet, and Opus Models
A developer tested Claude's three models on a 400-line Express.js refactoring task and found the key difference is reasoning depth, not intelligence. Haiku 4.5 handled straightforward parts but missed middleware ordering, Sonnet 4.6 caught the ordering issue and added TypeScript types, while Opus 4.6 identified a security flaw in auth middleware.