From ce553591b121ffacad5de2b5bca73c4cdd327d3f Mon Sep 17 00:00:00 2001 From: Anton Vakhrushev Date: Sat, 11 Jul 2026 19:25:02 +0300 Subject: [PATCH] Miniflux: allow fetching feeds from private network Since 2.2.18 the fetcher blocks private/loopback hosts by default (SSRF protection), which broke feeds served via rssbridge_app in the docker network. --- files/miniflux/docker-compose.template.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/files/miniflux/docker-compose.template.yml b/files/miniflux/docker-compose.template.yml index f0ad528..fb06523 100644 --- a/files/miniflux/docker-compose.template.yml +++ b/files/miniflux/docker-compose.template.yml @@ -22,6 +22,9 @@ services: - ADMIN_USERNAME_FILE=/secrets/miniflux_admin_user - ADMIN_PASSWORD_FILE=/secrets/miniflux_admin_password - BASE_URL=https://miniflux.vakhrushev.me + # Allow fetching feeds from private network (e.g. rssbridge_app in docker network). + # Since 2.2.18 the fetcher refuses private/loopback hosts by default (SSRF protection). + - FETCHER_ALLOW_PRIVATE_NETWORKS=1 - DISABLE_LOCAL_AUTH=1 - OAUTH2_OIDC_DISCOVERY_ENDPOINT=https://auth.vakhrushev.me - OAUTH2_CLIENT_ID_FILE=/secrets/miniflux_oidc_client_id