Clarify the description of ALLOW_PRIVATE_ADDRESSES (#1533)

Co-authored-by: Johannes Ernst <git@j12t.org>
mastodon · Sep 25, 2024 · 41ee8f3 · 41ee8f3
1 parent 9d2ff8b
commit 41ee8f3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/content/en/admin/config.md b/content/en/admin/config.md
@@ -40,7 +40,7 @@ If you have multiple domains pointed at your Mastodon server, this setting will
 
 #### `ALLOWED_PRIVATE_ADDRESSES`
 
-Comma-separated specific addresses/subnets are allowed in outgoing HTTP queries.
+Comma-separated list of private IP addresses/subnets that are allowed in outgoing HTTP requests. Mastodon blocks HTTP requests to hosts on private IP address ranges (like `127.0.0.1` or `192.168.1.1/16`) to prevent [Server-side request forgeries](https://en.wikipedia.org/wiki/Server-side_request_forgery). This setting removes the specified IP addresses/subnets from being blocked.
 
 #### `AUTHORIZED_FETCH`