Chat web pages
Which web pages chat models may open: the public internet by default, or your intranet on offline networks.
Default
When a chat model opens a link (read page, deep research), Janus fetches the page for it. By default only the public internet, on ports 80, 443, 8080 and 8443, verified against the system roots, connected directly. Private networks and internal names are refused.
This server itself, link-local addresses (including cloud metadata at 169.254.169.254), multicast and unspecified addresses are never opened, whatever is set.
Startup options
Set as environment variables (with the Helm chart, under extraEnv); shown read-only under Administration → Chat → Tools.
JANUS_WEB_ALLOW_PRIVATE=true also opens private networks (10/8, 172.16/12, 192.168/16, 100.64/10, fc00::/7) and internal names (intranet, *.local, *.internal, *.lan, *.svc): for offline networks.
JANUS_WEB_ALLOW_NETWORKS / JANUS_WEB_DENY_NETWORKS: only, or never, these IP ranges. JANUS_WEB_ALLOW_DOMAINS / JANUS_WEB_DENY_DOMAINS: only, or never, these sites (each matches its subdomains). Deny always wins.
JANUS_WEB_ALLOW_PORTS replaces the standard ports. JANUS_WEB_HTTPS_ONLY=true refuses http:// pages.
JANUS_WEB_PROXY sends every page read through that proxy, with no direct fallback; the proxy then decides where names lead.
JANUS_WEB_TLS_TRUST: system (default), custom (system roots plus the trust store: DoD roots, JANUS_CA_BUNDLE, JANUS_CA_DIR and certificates uploaded under Settings → Certificates), or custom-only (only sites signed by the trust store’s CAs). Certificate changes apply without a restart, and page reads run the revocation check when JANUS_TLS_REVOCATION is on.
extraEnv:
JANUS_WEB_ALLOW_PRIVATE: "true" # offline network: open the intranet
JANUS_WEB_ALLOW_DOMAINS: docs.enclave.example
JANUS_WEB_TLS_TRUST: custom-only # CAs from Settings → Certificates or JANUS_CA_DIR