Extend the ipaccess ranges

Trust private networks when OBS_TRUST_PRIVATE_NET is 1/yes/true

These addresses are often used by Docker and other cloud setups, and because of their often complex configurations it’s often easier to permit the whole range, since usually the operating system’s IP filter will be configured to block improper access anyway.

OBS_TRUST_PRIVATE_NET will be set by default by the backend Docker entrypoint, but can be unset by explicitly setting it e.g. to no

docker/backend-docker-entrypoint.sh

@@ -54,4 +54,7 @@ then
     mv /etc/supervisor/conf.d/obssigner.conf /etc/supervisor/conf.d/obssigner.conf.disabled
 fi
 
+: ${OBS_TRUST_PRIVATE_NET:=1}
+export OBS_TRUST_PRIVATE_NET
+
 exec /usr/bin/supervisord -n