Maurice 7cfec6452d fix(ssrf): let a listed link-local address through, such as a rootless Podman host gateway ...

A rootless Podman container reaches its host through 169.254.1.2, and an
identity provider behind that address failed the OIDC login with "Requests
to link-local / cloud-metadata addresses are not allowed", with no setting
to change it.

ALLOW_LINK_LOCAL_IPS names single link-local IPv4 addresses that may be
reached after all. The admin-configured lane (OIDC, AI parsing, plugin
OAuth, routing engines) reaches a listed address directly; the guard on
user-supplied URLs treats it as internal, so it also needs
ALLOW_INTERNAL_NETWORK there. 169.254.169.0/24 and 169.254.170.0/24, where
clouds serve instance metadata and credentials, cannot be listed, and an
entry that is not one link-local IPv4 aborts startup. Unset, nothing
changes.

Closes #2400

2026-09-19 22:39:12 +02:00

..

assets

docs(wiki): add the feature-requests banner used by the release notes

2026-09-03 16:18:21 +02:00

_Footer.md

v3.4.0 (#1540)

2026-07-18 22:13:52 +02:00

_Sidebar.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

Accommodations.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

Addons-Overview.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

Admin-Addons.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

Admin-Categories.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Admin-GitHub-Releases.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Admin-MCP-Tokens.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Admin-Packing-Templates.md

v3.4.0 (#1540)

2026-07-18 22:13:52 +02:00

Admin-Panel-Overview.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

Admin-Permissions.md

Require share_manage for the two public credentials (#1883)

2026-08-11 11:15:32 +02:00

Admin-Plugins.md

feat(plugins): TREK_PLUGINS_IGNORE_TREK_RANGE turns the version gate into a warning (#2226)

2026-09-04 00:43:06 +02:00

Admin-Storage.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

Admin-Users-and-Invites.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

AI-Booking-Import.md

fix(admin): say what the local model actually gets

2026-09-12 13:07:08 +02:00

Appearance-Settings.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Atlas.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Audit-Log.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

Backups.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Budget-Tracking.md

fix(costs): derive the final budget breakdown on the server, in the same cents

2026-09-12 17:33:15 +02:00

Calendar-Feeds.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Collab-Chat.md

fix(collab): harden the link preview fetcher (#2058)

2026-08-27 12:03:04 +02:00

Collab-Notes.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Collab-Polls.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Collections.md

feat(collections): export and import a list as GPX

2026-09-19 21:01:45 +02:00

Contributing.md

fix(maps): default the Leaflet basemap to OpenFreeMap

2026-08-29 00:51:43 +02:00

Creating-a-Trip.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Currencies.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Dashboard-Widgets.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Dawarich.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

Day-Plans-and-Notes.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Demo-Mode.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Development-environment.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Display-Settings.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

Document-Sync.md

fix(docsync): an orphaned binding stays stopped on every path that starts a run

2026-09-19 21:57:04 +02:00

Documents-and-Files.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

Encryption-Key-Rotation.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Environment-Variables.md

fix(ssrf): let a listed link-local address through, such as a rootless Podman host gateway

2026-09-19 22:39:12 +02:00

FAQ.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

Home.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

In-App-Help.md

v3.4.0 (#1540)

2026-07-18 22:13:52 +02:00

Install-Docker-Compose.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Install-Docker.md

v3.4.1 (#1606)

2026-07-19 19:00:40 +02:00

Install-Helm.md

docs(helm): document the probes block, and survive probes being nulled

2026-09-06 17:26:51 +02:00

Install-Portainer.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Install-Proxmox.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Install-Unraid.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Internal-Network-Access.md

fix(ssrf): let a listed link-local address through, such as a rootless Podman host gateway

2026-09-19 22:39:12 +02:00

Invite-Links.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Journey-Journal.md

fix(journey): a place kept across two days is two days of the journal

2026-09-15 15:31:59 +03:00

Languages.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Login-and-Registration.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Map-Features.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

Map-Settings.md

docs(maps): Amap beside the TREK index

2026-09-12 18:03:11 +02:00

MCP-Addon-Tools.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

MCP-Overview.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

MCP-Prompts.md

docs: add full wiki with 74 pages, assets, and CI workflow

2026-04-20 10:11:53 +02:00

MCP-Scopes.md

docs(wiki): document plugins:use

2026-08-29 12:22:59 +02:00

MCP-Setup.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

MCP-Tools-and-Resources.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

My-Trips-Dashboard.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Notifications.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Offline-Mode-and-PWA.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

OIDC-SSO.md

change oidc behavior with remember me on by default when oidc only enabled (#2397)

2026-09-19 09:12:15 +02:00

Packing-Lists.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Packing-Templates.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Passkeys.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Password-Reset.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

PDF-Export.md

feat(pdf): put the trip's route map in the export

2026-09-15 15:58:36 +03:00

Photo-Providers.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Places-and-Search.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

Plugin-Cookbook.md

feat(plugins): let a plugin answer place searches from its own index

2026-09-10 21:40:51 +02:00

Plugin-Development.md

feat(plugins): let a plugin answer place searches from its own index

2026-09-10 21:40:51 +02:00

Plugin-Permissions.md

feat(plugins): let a plugin answer place searches from its own index

2026-09-10 21:40:51 +02:00

Plugin-Publishing.md

Fix/sdk screenshot gate parity (#2164)

2026-08-31 14:32:53 +02:00

Plugins.md

Feat/plugin instance actions (#2209)

2026-09-02 23:06:03 +02:00

Public-API.md

feat(api): let public API keys be scoped to single areas

2026-09-12 23:36:09 +02:00

Public-Share-Links.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Quick-Start.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Real-Time-Collaboration.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Reservations-and-Bookings.md

fix(mcp): keep transit out of the transport create enum

2026-08-28 14:20:02 +02:00

Reverse-Proxy.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Road-Trip.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

Route-Optimization.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

Security-Hardening.md

feat(plugins): TREK_PLUGINS_IGNORE_TREK_RANGE turns the version gate into a warning (#2226)

2026-09-04 00:43:06 +02:00

Tags-and-Categories.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Todos-and-Tasks.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Transport-Flights-Trains-Cars.md

docs(wiki): the tools and fields added across the MCP surface

2026-08-28 14:20:02 +02:00

TREK-Places-API.md

docs(wiki): document road trip, document sync, the TREK Places API and Dawarich

2026-09-19 21:45:16 +02:00

Trip-Members-and-Sharing.md

docs(wiki): the tools and fields added across the MCP surface

2026-08-28 14:20:02 +02:00

Trip-Planner-Overview.md

docs(wiki): a booked check-out no longer drives the road trip schedule

2026-09-19 21:48:08 +02:00

Troubleshooting.md

fix(ssrf): let a listed link-local address through, such as a rootless Podman host gateway

2026-09-19 22:39:12 +02:00

Two-Factor-Authentication.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

Updating.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00

User-Settings.md

fix(maps): default the Leaflet basemap to OpenFreeMap

2026-08-29 00:51:43 +02:00

Vacay.md

feat(vacay): add manual school holiday calendars

2026-09-12 12:51:27 +02:00

Weather-Forecasts.md

docs(wiki): correct what reading each page whole turned up (#2036)

2026-08-25 15:22:46 +02:00

Whats-Next-Widget.md

docs(wiki): bring the wiki in line with 4.0.0 (#2034)

2026-08-25 12:36:52 +02:00