Fixed
- WebDAV document storage now works with local/private-network targets: setting
DOCUMENT_STORAGE_WEBDAV_ALLOW_PRIVATE_NETWORK=truelifts the SSRF block for Nextcloud or other WebDAV servers that resolve to RFC 1918 / loopback addresses (e.g. same Docker Compose stack, LAN domain via Caddy). The guard remains active by default; the opt-in is explicit and documented.
Closes #356.