App.ini ALLOWED_HOST_LIST not being honored

I have just installed gitea for the first time on a vm. i was really excited to use it along with proxmox, jenkins, and terraform to demo how one could completely automate VM deployments with nothing but free open source tools.

however i am running into an issue where the app.ini [webhook] settings do not seem to be honored.

root@gitea:~# cat /etc/gitea/app.ini

[webhook]
SKIP_TLS_VERIFY = true
DELIVER_TIMEOUT = 10
ALLOWED_HOST_LIST = *

i know that the file is being read because when i add bogus certs like so i get ssl exceptions in the browser

[server]
CERT_FILE = /etc/gitea/cert
KEY_FILE = /etc/gitea/key

i have rebooted the server countless times hoping for a glimmer of light at the end of the tunnel and have been let down everytime. just keep getting this when i click the “test” button in the repo webhook setting

Delivery: Post "http://192.168.0.214:8080/job/build-vms/build?token=xyz": dial tcp 192.168.0.214:8080: webhook can only call allowed HTTP servers (check your webhook.ALLOWED_HOST_LIST setting), deny '192.168.0.214(192.168.0.214:8080)'

any help is greatly appreciated…