From c1cffc53c8eb932b71a48be46b07f663b1f8e83d Mon Sep 17 00:00:00 2001
From: Saurabh <skmishra1991@gmail.com>
Date: Fri, 20 Mar 2026 10:57:03 +0530
Subject: [PATCH] fix: default to secure TLS in Synology Chat transport

---
 extensions/synology-chat/src/client.ts | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/extensions/synology-chat/src/client.ts b/extensions/synology-chat/src/client.ts
index d66f1b720f4..edf840a88cf 100644
--- a/extensions/synology-chat/src/client.ts
+++ b/extensions/synology-chat/src/client.ts
@@ -49,7 +49,7 @@ export async function sendMessage(
   incomingUrl: string,
   text: string,
   userId?: string | number,
-  allowInsecureSsl = true,
+  allowInsecureSsl = false,
 ): Promise<boolean> {
   // Synology Chat API requires user_ids (numeric) to specify the recipient
   // The @mention is optional but user_ids is mandatory
@@ -90,7 +90,7 @@ export async function sendFileUrl(
   incomingUrl: string,
   fileUrl: string,
   userId?: string | number,
-  allowInsecureSsl = true,
+  allowInsecureSsl = false,
 ): Promise<boolean> {
   const body = buildWebhookBody({ file_url: fileUrl }, userId);
 
@@ -112,7 +112,7 @@ export async function sendFileUrl(
  */
 export async function fetchChatUsers(
   incomingUrl: string,
-  allowInsecureSsl = true,
+  allowInsecureSsl = false,
   log?: { warn: (...args: unknown[]) => void },
 ): Promise<ChatUser[]> {
   const now = Date.now();
@@ -187,7 +187,7 @@ export async function fetchChatUsers(
 export async function resolveChatUserId(
   incomingUrl: string,
   webhookUsername: string,
-  allowInsecureSsl = true,
+  allowInsecureSsl = false,
   log?: { warn: (...args: unknown[]) => void },
 ): Promise<number | undefined> {
   const users = await fetchChatUsers(incomingUrl, allowInsecureSsl, log);
@@ -220,7 +220,7 @@ function parseNumericUserId(userId?: string | number): number | undefined {
   return Number.isNaN(numericId) ? undefined : numericId;
 }
 
-function doPost(url: string, body: string, allowInsecureSsl = true): Promise<boolean> {
+function doPost(url: string, body: string, allowInsecureSsl = false): Promise<boolean> {
   return new Promise((resolve, reject) => {
     let parsedUrl: URL;
     try {