diff --git a/vite.config.ts b/vite.config.ts
index fe7b4db..c062f1f 100644
--- a/vite.config.ts
+++ b/vite.config.ts
@@ -16,6 +16,11 @@ const pkg = JSON.parse(readFileSync(new URL('./package.json', import.meta.url),
 generateLearnPages();
 
 export default defineConfig({
+  server: {
+    // Hetzner dev box: fronted by tailscale serve (HTTPS on the tailnet), which
+    // forwards the ts.net Host header — allow it past DNS-rebinding protection.
+    allowedHosts: ['.ts.net'],
+  },
   resolve: {
     alias: {
       '@': fileURLToPath(new URL('./src', import.meta.url)),