mirror of
https://github.com/coollabsio/coolify.git
synced 2026-10-05 21:47:10 -04:00
Since GitHub App and GitLab API calls use the outbound URL guard, GitHub Enterprise or GitLab on a private network failed with "Webhook URL resolved to an unsafe IP address" unless an admin allow-listed it. On self-hosted instances, Git source URLs and requests now allow private (RFC 1918), CGNAT (100.64/10, Tailscale), and IPv6 unique local addresses, plus internal hostnames such as .internal, .local, and container names. Loopback, localhost, link-local (cloud metadata), 0.0.0.0, and other reserved targets stay blocked. Redirects stay off and DNS stays pinned. Coolify Cloud and all other outbound URLs keep the strict rules. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>