Skip to content

docs: Add documentation for LANGFUSE_WEBHOOK_WHITELISTED_* environment variables #2226

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

docs: Add documentation for LANGFUSE_WEBHOOK_WHITELISTED_* environment variables #2226

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions pages/docs/prompt-management/features/webhooks-slack-integrations.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -218,3 +218,15 @@ export function verifyLangfuseSignature(
</Tab>

</Tabs>


# Troubleshooting

For security reasons, langfuse will by default not allow users to make webhook requests to local ips or internal hostnames.
If you try, you might get one of these error messages:

- `Blocked hostname detected`
- `Blocked IP address detected: <some ip>`
- `DNS lookup failed for <some hostname>`

To resolve this problem set one of the corresponding `LANGFUSE_WEBHOOK_WHITELISTED_*` environment variables for the langfuse server. See [Configuration](/self-hosting/configuration) for details.
3 changes: 3 additions & 0 deletions pages/self-hosting/configuration/index.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,6 +70,9 @@ Langfuse (self-hosted) has extensive configuration options via environment varia
| `LANGFUSE_LOG_LEVEL` | `info` | Set the log level for the application. Possible values are `trace`, `debug`, `info`, `warn`, `error`, `fatal`. |
| `LANGFUSE_LOG_FORMAT` | `text` | Set the log format for the application. Possible values are `text`, `json`. |
| `LANGFUSE_LOG_PROPAGATED_HEADERS` | | Comma-separated list of HTTP header names to propagate through logs via OpenTelemetry baggage. Header names are case-insensitive and will be normalized to lowercase. Useful for debugging and observability. Example: `x-request-id,x-user-id`. |
| `LANGFUSE_WEBHOOK_WHITELISTED_HOST` | `""` | Comma-separated list of webhook hosts, that will not be validated. Use this for accessing local webhook servers.
| `LANGFUSE_WEBHOOK_WHITELISTED_IPS` | `""` | Comma-separated list of webhook resolved ips, that will not be validated. Use this for accessing local webhook servers.
| `LANGFUSE_WEBHOOK_WHITELISTED_IP_SEGMENTS` | `""` | Comma-separated list of local ip ranges, that are allowed to be used as webhook destinations, even though they would normally be forbidden by the security policy. Use CIDR syntax for specifying the ranges.

### Additional Features

Expand Down