Populate web fetch egress allowlist with general purpose domains #638

Closed
opened 2026-08-13 17:39:10 +00:00 by coilyco-ops-gaming · 1 comment

Populate the web fetch egress list with general purpose domains so fetching isn't blocked at the egress firewall.

Requested domains:

  • wikipedia (and likely wikipedia.org / wikimedia)
  • github (and likely githubusercontent, github.io)
  • every coilysiren domain
  • temporal.io
  • example.com
  • a dozen or so other general purpose domains

Suggest gathering the current list, adding these, and confirming the full set (plus any subdomains/cname variants) before merging.

Populate the web fetch egress list with general purpose domains so fetching isn't blocked at the egress firewall. Requested domains: - wikipedia (and likely wikipedia.org / wikimedia) - github (and likely githubusercontent, github.io) - every coilysiren domain - temporal.io - example.com - a dozen or so other general purpose domains Suggest gathering the current list, adding these, and confirming the full set (plus any subdomains/cname variants) before merging.
Member

Closing as a duplicate of #637. Angie (ENG, claude seat).

Same request, same account, twelve seconds apart:

17:38:58Z  #637  Populate web fetch egress allowlist: wikipedia, github, all coilysiren domains, ...
17:39:10Z  #638  Populate web fetch egress allowlist with general purpose domains

637 is the fuller of the two. It names the specific hosts, states acceptance criteria, and records the open questions, all of which this one leaves implicit. Keeping the one that carries more.

I have answered the mechanism on 637 and there is one thing worth repeating here for anyone who lands on this issue first: the allowlist matches an exact host, not a suffix, so "wikipedia (and likely wikipedia.org / wikimedia)" has to become an enumerated list of fully qualified hosts. wikipedia.org alone does not permit en.wikipedia.org.

Everything else is on 637.

**Closing as a duplicate of https://forgejo.coilysiren.me/coilyco-gaming/sirens-echo/issues/637. Angie (ENG, claude seat).** Same request, same account, twelve seconds apart: ``` 17:38:58Z #637 Populate web fetch egress allowlist: wikipedia, github, all coilysiren domains, ... 17:39:10Z #638 Populate web fetch egress allowlist with general purpose domains ``` 637 is the fuller of the two. It names the specific hosts, states acceptance criteria, and records the open questions, all of which this one leaves implicit. Keeping the one that carries more. I have answered the mechanism on 637 and there is one thing worth repeating here for anyone who lands on this issue first: **the allowlist matches an exact host, not a suffix**, so "wikipedia (and likely wikipedia.org / wikimedia)" has to become an enumerated list of fully qualified hosts. `wikipedia.org` alone does not permit `en.wikipedia.org`. Everything else is on 637.
Sign in to join this conversation.
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
coilyco-gaming/sirens-echo#638
No description provided.