Skip to content

SSFR white list #161

Description

@masc145

we compose the openproject docker
it is running
ONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
75210eac61ee openproject/openproject:17 "./docker/prod/entry…" 9 minutes ago Up 9 minutes 80/tcp openproject-cron-1
55dcafdf81b5 openproject/openproject:17 "./docker/prod/entry…" 9 minutes ago Up 9 minutes (healthy) 80/tcp openproject-web-1
da537b2f6b16 openproject/openproject:17 "./docker/prod/entry…" 9 minutes ago Up 9 minutes 80/tcp openproject-worker-1
9ff71e0b660b openproject/openproject:17 "./docker/prod/entry…" 9 minutes ago Exited (0) 8 minutes ago openproject-seeder-1
f3cabc0a48ed openproject/proxy "caddy run --config …" 45 hours ago Up 45 hours 443/tcp, 2019/tcp, 443/udp, 127.0.0.1:8082->80/tcp openproject-proxy-1
232d79584fd9 postgres:17 "docker-entrypoint.s…" 45 hours ago Up 45 hours 5432/tcp openproject-db-1
498d4aab8a47 memcached "docker-entrypoint.s…" 45 hours ago Up 45 hours 11211/tcp openproject-cache-1
6960df53fa5f openproject/hocuspocus:17.6.0 "docker-entrypoint.s…" 45 hours ago Up 45 hours 1234/tcp openproject-hocuspocus-1
ab3cb33cfb5e willfarrell/autoheal:1.2.0 "/docker-entrypoint …" 45 hours ago Up 45 hours (healthy) openproject-autoheal-1

we need to add an ip allow list (gmail) (smtp)
OPENPROJECT_SSRF_PROTECTION_IP_ALLOWLIST: 108.177.16.0/23,142.250.220.0/23
we wrote it in the docker-compose.yml, at the environment: section as it is above

then run
docker compose up -d

log out, log in again, try to do the email test and still getting the error:

SMTP address smtp.gmail.com is not safe. Please add it to the whitelist using the OPENPROJECT_SSRF_PROTECTION_IP_ALLOWLIST environment variable.

we also tried to do it this way
docker exec -it -e OPENPROJECT_SSRF_PROTECTION_IP_ALLOWLIST=108.177.16.0/23,142.250.220.0/23 openproject-web-1 bundle exec rake setting:available_envs

and no luck

can any one help us?

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions