khanh.pndc/open-webui-docs
1
0
Fork 0
mirror of https://github.com/open-webui/docs.git synced 2025-12-12 07:29:49 +07:00
Code Issues Packages Projects Releases Wiki Activity

Update env-configuration.mdx

Browse Source
This commit is contained in:
Classic298
2025-11-18 11:39:02 +01:00
committed by GitHub
parent 0eca94df0a
commit 50c00ae095
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
docs/getting-started/env-configuration.mdx
View File

@@ -2379,6 +2379,19 @@ This Tenant ID (also known as Directory ID) is required for the work/school inte
- Description: Enables proxy set by `http_proxy` and `https_proxy` during web search content fetching.
- Persistence: This environment variable is a `PersistentConfig` variable.
#### `WEB_FETCH_FILTER_LIST`
- Type: `string` (comma-separated list)
- Default: `""` (empty, but default blocklist is always applied)
- Description: Configures additional URL filtering rules for web fetch operations to prevent Server-Side Request Forgery (SSRF) attacks. The system includes a default blocklist that protects against access to cloud metadata endpoints (AWS, Google Cloud, Azure, Alibaba Cloud). Entries without a ! prefix are treated as an allow list (only these domains are permitted), while entries with a ! prefix are added to the block list (these domains are always denied). The default blocklist includes !169.254.169.254, !fd00:ec2::254, !metadata.google.internal, !metadata.azure.com, and !100.100.100.200. Custom entries are merged with the default blocklist.
:::info
Example:
Block additional domains: WEB_FETCH_FILTER_LIST="!internal.company.com,!192.168.1.1"
Allow only specific domains: WEB_FETCH_FILTER_LIST="example.com,trusted-site.org"
:::
#### `WEB_SEARCH_RESULT_COUNT`
- Type: `int`