Open link in a new tab

Content

Expand project menu

SSFR Allow IP

We have been trying to insert an IP ALLOW LIST to a Docker image, so when we do the SMTP Test we won't get that Gmail IP is not secure

We  have tried all forms, with quotes, without them, with the override.yml, and directly

      - OPENPROJECT_SSRF_PROTECTION_IP_ALLOWLIST=108.177.16.0/23,142.250.220.0/23

docker exec -it -e OPENPROJECT_SSRF_PROTECTION_IP__ALLOWLIST: "108.177.16.0/23,142.250.220.0/23" openproject-web-1 bundle exec rake setting:available_envs

we will be using smtp relay thru gmail to send the emails, with out them, we can not confirm any users

Can any of you guys help us?


Message actions

Looking at the docs, the correct name is 
OPENPROJECT_SSRF__PROTECTION__IP__ALLOWLIST
so one underscore after OPENPROJECT, two underscores afterwards

Message actions

docker exec -it -e OPENPROJECT_SSRF__PROTECTION__IP__ALLOWLIST:"108.177.16.0/23,142.250.220.0/23" openproject-web-1 bundle exec rake setting:available_envs


We change it, it did not worked

Message actions

I think that docker exec wants = instead of :

Message actions

No, it didn´t either

Went to Email Notificacion, tray to a test email 

And I get this

SMTP address smtp.gmail.com is not safe. Please add it to the whitelist using the OPENPROJECT_SSRF_PROTECTION_IP_ALLOWLIST environment variable.