pub const TRUSTED_HTTP_HOSTS_ENV: &str = "SYSTEMPROMPT_TRUSTED_HTTP_HOSTS";Expand description
Operator-supplied allowlist of non-loopback hostnames reachable over plain
http.
Comma-separated, case-insensitive, exact domain match only — no globs, no
IP, no port. The intended use is sealed-network demos (the air-gap scenario)
and behind-the-firewall mock services, where the SSRF guard’s default
“loopback-only http” rule would otherwise reject a known-trusted internal
hostname like mock-inference. Default empty — operator opts in by
naming every host explicitly. Does not loosen the scheme, IP block, or
private-range rules for any host outside the allowlist.