Update from support feedback: clarify Git integration network requirements - #7172
Merged
Merged
Conversation
Contributor
Author
|
Preview deployment for your docs. Learn more about Mintlify Previews.
|
Contributor
Author
|
Preview deployment for your docs. Learn more about Mintlify Previews.
💡 Tip: Enable Workflows to automatically generate PRs for you. |
- Updated deploy/ghes.mdx - Updated deploy/gitlab-self-hosted.mdx Mintlify-Source: dashboard-editor
Resolves the nav conflicts with #7276 and narrows this PR to the substantive content changes. - Correct the static-IP claims. 54.242.90.151 is the platform's egress IP (API calls, check runs, deployment statuses). Agent sandboxes use dynamic IPs unless support enables the static-egress-proxy flag for a deployment, so clone/push is no longer attributed to the static IP. This removes the contradiction with help-center/agent-blocked-by-git-provider-ip-allow-list (#7276) and cross-links it from all three pages. - Revert the Steps reindentation in deploy/ghes.mdx, leaving only the network requirements rewrite. - Revert the hand-edited es/fr/zh files and nav entries; translations run automatically after merge. - Add a language tag to the IP code block and fix Vale term errors. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
ethanpalm
self-requested a review
September 14, 2026 16:56
ethanpalm
approved these changes
Sep 14, 2026
This was referenced Sep 16, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Support threads from enterprise customers showed the GHES firewall docs conflate inbound and outbound traffic, and the self-hosted GitLab page has no egress-IP guidance. This PR rewrites the GHES network requirements to state the direction of each connection (outbound to
leaves.mintlify.comby hostname; inbound from static egress IP54.242.90.151), adds a matching network requirements section to the self-hosted GitLab page, and adds a help center article answering "What IPs does Mintlify connect to my Git provider from?"Changes
deploy/ghesnetwork requirements with explicit outbound/inbound sectionsdeploy/gitlab-self-hostedhelp-center/ip-addresses-for-git-provider-allowlistsand registered it in the naves/,fr/,zh/and updatedes.json,fr.json,zh.jsonnavigationSupport context
Note
Low Risk
Documentation-only changes to deployment and help-center pages; no application or security logic is modified.
Overview
Clarifies bidirectional Git integration firewall rules for enterprise self-hosted setups, addressing support feedback that GHES docs mixed inbound and outbound traffic.
GHES (
deploy/ghes): The network requirements section is rewritten into explicit outbound (webhooks toleaves.mintlify.comby hostname + DNS) and inbound (Mintlify API traffic from static egress54.242.90.151) subsections, and drops the misleading framing that tied inbound allowlisting to outbound rules. A Note points Agent clone/push traffic at dynamic IPs and the existing IP-allowlist troubleshooting article.Self-hosted GitLab (
deploy/gitlab-self-hosted): Adds a matching Network requirements section (inbound from54.242.90.151, outbound webhooks toapp.mintlify.comby hostname) with the same Agent allowlist caveat.Help center: New article
ip-addresses-for-git-provider-allowlistscentralizes the static egress IP, when to allowlist it (GHEC/GHES/GitLab), Agent vs platform traffic, and that webhook traffic to Mintlify should be allowed by hostname—not static IPs. Registered indocs.jsonhelp center nav.Reviewed by Cursor Bugbot for commit b8464b8. Bugbot is set up for automated code reviews on this repo. Configure here.