From 2ff05684a4e86bcc21e0036a61a90bcb54815911 Mon Sep 17 00:00:00 2001
From: mptyl <mp@tylconsulting.it>
Date: Tue, 11 Aug 2026 19:49:18 +0200
Subject: [PATCH] fix: pass the HTTP private-host allowlist into the
 maintenance container

---
 backend/scripts/p2-acceptance.mjs | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/backend/scripts/p2-acceptance.mjs b/backend/scripts/p2-acceptance.mjs
index 3a7090e9..340267cf 100644
--- a/backend/scripts/p2-acceptance.mjs
+++ b/backend/scripts/p2-acceptance.mjs
@@ -779,7 +779,10 @@ async function writeInstallationFiles(ctx) {
       },
       "workspace-maintenance": {
         image: ctx.coreImageTag,
-        environment: { P2_CHILD_DEBUG: "1" },
+        environment: {
+          P2_CHILD_DEBUG: "1",
+          THT_EVIDENCE_PRIVATE_HOST_ALLOWLIST: "host.docker.internal",
+        },
         extra_hosts: ["host.docker.internal:host-gateway"],
       },
       qdrant: {