allowInsecureHttp

Allows a plain http:// baseUrl on a host other than this machine, such as an Ollaya server elsewhere on the network. Off by default: without TLS, the API key and every state cross the network in cleartext. A loopback host (localhost, 127.x.x.x, ::1) never needs it.