/**
 * Network detection and TLS certificate utilities for the bridge.
 *
 * Priority:
 * 1. Tailscale HTTPS cert (trusted Let's Encrypt via `tailscale cert`)
 * 2. No TLS (HTTP) — Tailscale encrypts via WireGuard, or use behind Caddy
 */
export interface TailscaleTls {
    cert: string;
    key: string;
    hostname: string;
}
/** Detect Tailscale IP from network interfaces (100.64.0.0/10 CGNAT range). */
export declare function detectTailscaleIp(): string | null;
/** Get Tailscale MagicDNS hostname (best-effort). */
export declare function detectTailscaleHostname(): string | null;
/**
 * Try to get Tailscale HTTPS cert (Let's Encrypt issued via tailscale cert).
 * Looks for cert files in home directory (where `tailscale cert` puts them).
 * If not found, tries to generate them.
 */
export declare function getTailscaleTls(): TailscaleTls | null;