av/pet-project-server
1
0
Fork 0
Code Pull Requests Actions Activity

Miniflux: allow fetching feeds from private network
Linting / YAML Lint (push) Has been cancelled
Details
Linting / Ansible Lint (push) Has been cancelled
Details

Browse Source 
Since 2.2.18 the fetcher blocks private/loopback hosts by default (SSRF
protection), which broke feeds served via rssbridge_app in the docker network.
This commit is contained in:
av
2026-07-11 19:25:02 +03:00
parent 57b9df201e
commit ce553591b1
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
files/miniflux/docker-compose.template.yml
+3
View File
@@ -22,6 +22,9 @@ services:
- ADMIN_USERNAME_FILE=/secrets/miniflux_admin_user - ADMIN_USERNAME_FILE=/secrets/miniflux_admin_user
- ADMIN_PASSWORD_FILE=/secrets/miniflux_admin_password - ADMIN_PASSWORD_FILE=/secrets/miniflux_admin_password
- BASE_URL=https://miniflux.vakhrushev.me - BASE_URL=https://miniflux.vakhrushev.me
# Allow fetching feeds from private network (e.g. rssbridge_app in docker network).
# Since 2.2.18 the fetcher refuses private/loopback hosts by default (SSRF protection).
- FETCHER_ALLOW_PRIVATE_NETWORKS=1
- DISABLE_LOCAL_AUTH=1 - DISABLE_LOCAL_AUTH=1
- OAUTH2_OIDC_DISCOVERY_ENDPOINT=https://auth.vakhrushev.me - OAUTH2_OIDC_DISCOVERY_ENDPOINT=https://auth.vakhrushev.me
- OAUTH2_CLIENT_ID_FILE=/secrets/miniflux_oidc_client_id - OAUTH2_CLIENT_ID_FILE=/secrets/miniflux_oidc_client_id