From 9443ce40132ff522fb6ac32da0ac911ad6eea299 Mon Sep 17 00:00:00 2001
From: Jay Collett <486430+jaycollett@users.noreply.github.com>
Date: Thu, 29 Jan 2026 13:46:32 -0500
Subject: [PATCH] Add global TLS verification skip setting

Adds a new boolean setting in the Advanced settings group that allows
users to globally skip TLS certificate verification for all enhanced
apps. This is useful for users who have self-signed certificates on
their services.

When enabled, the Guzzle HTTP client will set 'verify' => false for
all API requests made by enhanced apps.

Resolves linuxserver/Heimdall-Apps#687
---
 app/SupportedApps.php               |  5 +++++
 database/seeders/SettingsSeeder.php | 14 ++++++++++++++
 lang/en/app.php                     |  1 +
 3 files changed, 20 insertions(+)

diff --git a/app/SupportedApps.php b/app/SupportedApps.php
index 9ef564212..02eee0085 100644
--- a/app/SupportedApps.php
+++ b/app/SupportedApps.php
@@ -85,6 +85,11 @@ public function execute(
             'connect_timeout' => 15,
         ] : $overridevars;
 
+        // Check global setting to skip TLS verification (useful for self-signed certificates)
+        if (Setting::fetch('skip_tls_verification')) {
+            $vars['verify'] = false;
+        }
+
         $client = new Client($vars);
 
         $method = ($overridemethod === null || $overridemethod === false) ? $this->method : $overridemethod;
diff --git a/database/seeders/SettingsSeeder.php b/database/seeders/SettingsSeeder.php
index 8618c5263..d5c08fd7e 100755
--- a/database/seeders/SettingsSeeder.php
+++ b/database/seeders/SettingsSeeder.php
@@ -349,5 +349,19 @@ public function run(): void
             $setting->label = 'app.settings.treat_tags_as';
             $setting->save();
         }
+
+        if (! $setting = Setting::find(15)) {
+            $setting = new Setting;
+            $setting->id = 15;
+            $setting->group_id = 4;
+            $setting->key = 'skip_tls_verification';
+            $setting->type = 'boolean';
+            $setting->label = 'app.settings.skip_tls_verification';
+            $setting->value = '0';
+            $setting->save();
+        } else {
+            $setting->label = 'app.settings.skip_tls_verification';
+            $setting->save();
+        }
     }
 }
diff --git a/lang/en/app.php b/lang/en/app.php
index 3c31f53d6..ee9a76a24 100644
--- a/lang/en/app.php
+++ b/lang/en/app.php
@@ -32,6 +32,7 @@
   'settings.folders' => 'Folders',
   'settings.tags' => 'Tags',
   'settings.categories' => 'Categories',
+  'settings.skip_tls_verification' => 'Skip TLS Verification (for self-signed certificates)',
   'options.none' => '- not set -',
   'options.google' => 'Google',
   'options.ddg' => 'DuckDuckGo',