Network allowlist configuration

Within secure networking contexts, you may need to allowlist some domains in order to use Determinate, including FlakeHub and FlakeHub Cache, properly. This document lists domains that you should consider required across the board as well as some optional domains that may be required in some cases.

Required domains

These domains should be allowlisted in all cases:

• flakehub.com
• cache.flakehub.com
• api.flakehub.com
• determinate.systems
• install.determinate.systems
• *.install.determinate.systems

Optional domains

In some cases, you may also want to allowlist some GitHub and Microsoft Entra domains.

GitHub domains

We recommend allowlisting these domains if you’re using GitHub sign-in to FlakeHub in the browser:

• github.com
• api.github.com

Entra domain

If you’re using Microsoft Entra for authentication, you will likely need to allowlist this domain:

• login.microsoftonline.com

Okta domain

If you’re using Okta for authentication, you may need to allowlist the Okta domain for your tenant:

• <tenant>.okta.com