Based on Paul Bastide's questions I did these additional steps:
- In opensocial-config.xml I set all whitelistEnabled and urlWhitelistEnabled attributes to false. Setting up just the developer tag attributes like the doc suggested wasn't enough.
- Set up hosts file to allow the connections server to access the gadget url.
For clarity I am using the Greenhouse image.