Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

SSFR white list

Open
  • Is something wrong?
#161 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
3/5
Estimated time
1-2 days
Newbie friendliness
42/100
Issue type
Bug
Clarity
Needs clarification
Activity status
Active
Tech stack
docker, docker-compose
Domain
devops, infrastructure, security

Research direction

Start with the environment section in docker-compose.yml and verify how OPENPROJECT_SSRF_PROTECTION_IP_ALLOWLIST reaches the openproject-web-1 container. Compare that with the setting:available_envs command, then rerun docker compose up -d and the email test; done means smtp.gmail.com is accepted without the safe-address error.

Written by the indexing model from the issue text.

Description

we compose the openproject docker
it is running
ONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
75210eac61ee openproject/openproject:17 "./docker/prod/entry…" 9 minutes ago Up 9 minutes 80/tcp openproject-cron-1
55dcafdf81b5 openproject/openproject:17 "./docker/prod/entry…" 9 minutes ago Up 9 minutes (healthy) 80/tcp openproject-web-1
da537b2f6b16 openproject/openproject:17 "./docker/prod/entry…" 9 minutes ago Up 9 minutes 80/tcp openproject-worker-1
9ff71e0b660b openproject/openproject:17 "./docker/prod/entry…" 9 minutes ago Exited (0) 8 minutes ago openproject-seeder-1
f3cabc0a48ed openproject/proxy "caddy run --config …" 45 hours ago Up 45 hours 443/tcp, 2019/tcp, 443/udp, 127.0.0.1:8082->80/tcp openproject-proxy-1
232d79584fd9 postgres:17 "docker-entrypoint.s…" 45 hours ago Up 45 hours 5432/tcp openproject-db-1
498d4aab8a47 memcached "docker-entrypoint.s…" 45 hours ago Up 45 hours 11211/tcp openproject-cache-1
6960df53fa5f openproject/hocuspocus:17.6.0 "docker-entrypoint.s…" 45 hours ago Up 45 hours 1234/tcp openproject-hocuspocus-1
ab3cb33cfb5e willfarrell/autoheal:1.2.0 "/docker-entrypoint …" 45 hours ago Up 45 hours (healthy) openproject-autoheal-1

we need to add an ip allow list (gmail) (smtp)
OPENPROJECT_SSRF_PROTECTION_IP_ALLOWLIST: 108.177.16.0/23,142.250.220.0/23
we wrote it in the docker-compose.yml, at the environment: section as it is above

then run
docker compose up -d

log out, log in again, try to do the email test and still getting the error:

SMTP address smtp.gmail.com is not safe. Please add it to the whitelist using the OPENPROJECT_SSRF_PROTECTION_IP_ALLOWLIST environment variable.

we also tried to do it this way
docker exec -it -e OPENPROJECT_SSRF_PROTECTION_IP_ALLOWLIST=108.177.16.0/23,142.250.220.0/23 openproject-web-1 bundle exec rake setting:available_envs

and no luck

can any one help us?

Dominant language
Shell
Stars
347
Forks
319
No merged PRs in 30d

Getting set up

  • Ships a Dockerfile or Docker Compose file
  • No pull request template
  • No contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from opf/openproject-docker-compose

All issues in opf/openproject-docker-compose

Similar issues

More Shell/Bash issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.