docs: update self-hosting documentation with secure context requirements for Office file conversion

2026-03-13 23:32:52 +05:30
parent d7e06ce361
commit 58c78b09d2
7 changed files with 44 additions and 10 deletions
--- a/docs/self-hosting/apache.md
+++ b/docs/self-hosting/apache.md
@@ -224,6 +224,8 @@ Header always set Cross-Origin-Embedder-Policy "require-corp"
 Header always set Cross-Origin-Opener-Policy "same-origin"
 ```

+It also needs a secure context. `http://localhost` works for local testing, but `http://192.168.x.x` or other LAN IPs usually require HTTPS. If the headers are present but `window.crossOriginIsolated` is still `false`, check whether the page is being opened over plain HTTP on a non-loopback origin.
+
 The pre-compressed `.wasm.gz` and `.data.gz` files also need correct `Content-Encoding`:

 ```apache