diff --git a/SulTee/SulTee/Info.plist b/SulTee/SulTee/Info.plist
index 1119bba..40874c4 100644
--- a/SulTee/SulTee/Info.plist
+++ b/SulTee/SulTee/Info.plist
@@ -48,6 +48,22 @@
 		<string>UIInterfaceOrientationLandscapeLeft</string>
 		<string>UIInterfaceOrientationLandscapeRight</string>
 	</array>
+	<key>NSAppTransportSecurity</key>
+	<dict>
+		<!-- Allow plain ws:// to Tailscale (CGNAT 100.64.0.0/10) and other local addresses.
+		     Error -1022 occurs because ATS blocks non-TLS connections by default.
+		     NSAllowsLocalNetworking covers loopback, link-local, and CGNAT ranges. -->
+		<key>NSAllowsLocalNetworking</key>
+		<true/>
+		<key>NSExceptionDomains</key>
+		<dict>
+			<key>100.64.0.2</key>
+			<dict>
+				<key>NSExceptionAllowsInsecureHTTPLoads</key>
+				<true/>
+			</dict>
+		</dict>
+	</dict>
 	<key>UIApplicationSceneManifest</key>
 	<dict>
 		<key>UIApplicationSupportsMultipleScenes</key>