From 454de2f170a2f718cfb4a2b2e99f40f69997d6a1 Mon Sep 17 00:00:00 2001
From: sneak <sneak@sneak.berlin>
Date: Wed, 25 Feb 2026 19:53:23 +0700
Subject: [PATCH] fix: restore original whitelist hosts in config.example.yml

---
 config.example.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/config.example.yml b/config.example.yml
index 68c3206..1660cb4 100644
--- a/config.example.yml
+++ b/config.example.yml
@@ -16,9 +16,11 @@ signing_key: "CHANGE_ME_generate_with_openssl_rand_base64_32"
 # Hosts that don't require signatures
 # Use "." prefix for wildcard subdomain matching (e.g., ".example.com" matches "cdn.example.com")
 whitelist_hosts:
+  - s3.sneak.cloud
   - static.sneak.cloud
   - sneak.berlin
-  - s3.sneak.cloud
+  - github.com
+  - user-images.githubusercontent.com
 
 # Allow HTTP upstream (only for testing, always use HTTPS in production)
 allow_http: false