
I self-hosted Homelable on Ubuntu 24.04 — CORS_ORIGINS stayed on localhost
I wanted a map and a rack canvas for the boxes I already run, not a third startpage. Homelable came up on Docker. The compose file hard-sets CORS_ORIGINS to localhost:3000 and ignores .env, so HTTPS is a CORS brick. nmap from a VPS bridge never sees home-LAN MACs. Loopback 3000, pin 3.6.0, public origin in the compose block — that is the lab path.
Oct 26, 2026 · 9 min read