diff --git a/Boot.php b/Boot.php
index 0d87e72..341e3c4 100644
--- a/Boot.php
+++ b/Boot.php
@@ -77,8 +77,12 @@ class Boot extends ServiceProvider
             $ollamaUrl = config('mcp.brain.ollama_url', 'http://localhost:11434');
             $qdrantUrl = config('mcp.brain.qdrant_url', 'http://localhost:6334');
 
-            // Skip TLS verification for .lan domains (self-signed certs behind Traefik)
-            $verifySsl = ! (str_contains($ollamaUrl, '.lan') || str_contains($qdrantUrl, '.lan'));
+            // Skip TLS verification for non-public TLDs (self-signed certs behind Traefik)
+            $hasLocalTld = static fn (string $url): bool => (bool) preg_match(
+                '/\.(lan|lab|local|test)(?:[:\/]|$)/',
+                parse_url($url, PHP_URL_HOST) ?? ''
+            );
+            $verifySsl = ! ($hasLocalTld($ollamaUrl) || $hasLocalTld($qdrantUrl));
 
             return new \Core\Mod\Agentic\Services\BrainService(
                 ollamaUrl: $ollamaUrl,