gitforge/modules/hostmatcher
forgejo-backport-action 46fdf2f883 [v16.0/forgejo] fix: add CGNAT (100.64.0.0/10) to 'private' hostmatcher rule (#13567)
**Backport:** https://codeberg.org/forgejo/forgejo/pulls/13547

Adds CGNAT IP space to the `private` builtin, and excludes it from the `external` builtin, for all allowed host lists.  As private space is described in Forgejo's documentation as "LAN/Intranet", and external is described as "you can access all hosts on the public internet", it is reasonable to exclude CGNAT space which doesn't qualify under those descriptions -- it is not a globally routable IP address.

Co-authored-by: Mathieu Fenniak <mathieu@fenniak.net>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/13567
Reviewed-by: Mathieu Fenniak <mfenniak@noreply.codeberg.org>
2026-07-21 23:08:29 +02:00
..
hostmatcher.go [v16.0/forgejo] fix: add CGNAT (100.64.0.0/10) to 'private' hostmatcher rule (#13567) 2026-07-21 23:08:29 +02:00
hostmatcher_test.go [v16.0/forgejo] fix: add CGNAT (100.64.0.0/10) to 'private' hostmatcher rule (#13567) 2026-07-21 23:08:29 +02:00
http.go