SSFR white list

we compose the openproject docker
it is running
ONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
75210eac61ee openproject/openproject:17 "./docker/prod/entry…" 9 minutes ago Up 9 minutes 80/tcp openproject-cron-1
55dcafdf81b5 openproject/openproject:17 "./docker/prod/entry…" 9 minutes ago Up 9 minutes (healthy) 80/tcp openproject-web-1
da537b2f6b16 openproject/openproject:17 "./docker/prod/entry…" 9 minutes ago Up 9 minutes 80/tcp openproject-worker-1
9ff71e0b660b openproject/openproject:17 "./docker/prod/entry…" 9 minutes ago Exited (0) 8 minutes ago openproject-seeder-1
f3cabc0a48ed openproject/proxy "caddy run --config …" 45 hours ago Up 45 hours 443/tcp, 2019/tcp, 443/udp, 127.0.0.1:8082->80/tcp openproject-proxy-1
232d79584fd9 postgres:17 "docker-entrypoint.s…" 45 hours ago Up 45 hours 5432/tcp openproject-db-1
498d4aab8a47 memcached "docker-entrypoint.s…" 45 hours ago Up 45 hours 11211/tcp openproject-cache-1
6960df53fa5f openproject/hocuspocus:17.6.0 "docker-entrypoint.s…" 45 hours ago Up 45 hours 1234/tcp openproject-hocuspocus-1
ab3cb33cfb5e willfarrell/autoheal:1.2.0 "/docker-entrypoint …" 45 hours ago Up 45 hours (healthy) openproject-autoheal-1

we need to add an ip allow list (gmail) (smtp)
OPENPROJECT_SSRF_PROTECTION_IP_ALLOWLIST: 108.177.16.0/23,142.250.220.0/23
we wrote it in the docker-compose.yml, at the environment: section as it is above

then run
docker compose up -d

log out, log in again, try to do the email test and still getting the error:

SMTP address smtp.gmail.com is not safe. Please add it to the whitelist using the OPENPROJECT_SSRF_PROTECTION_IP_ALLOWLIST environment variable.

we also tried to do it this way
docker exec -it -e OPENPROJECT_SSRF_PROTECTION_IP_ALLOWLIST=108.177.16.0/23,142.250.220.0/23 openproject-web-1 bundle exec rake setting:available_envs

and no luck

can any one help us?

Start with the environment section in docker-compose.yml and verify how OPENPROJECT_SSRF_PROTECTION_IP_ALLOWLIST reaches the openproject-web-1 container. Compare that with the setting:available_envs command, then rerun docker compose up -d and the email test; done means smtp.gmail.com is accepted without the safe-address error.