# IP allowlist — private-server lockdown.
#
# WHILE THIS FILE HAS AT LEAST ONE ADDRESS BELOW, only those addresses (plus the
# server's own loopback) can reach the server. Everyone else gets 502 on the whole
# domain, so to them the site looks down.
#
# HOW TO TURN IT ON:
#   put your public IP on its own line below (find it at https://ifconfig.me or
#   https://whatismyip.com), save the file. It takes effect within ~5 seconds — no
#   restart, no rebuild.
#
# HOW TO TURN IT OFF:
#   delete every address line (or delete this file). The server reopens immediately.
#
# SAFETY:
#   - loopback (127.0.0.1 / ::1) is ALWAYS allowed, so the admin panel over the SSH
#     tunnel keeps working even if your public IP is not listed or is wrong.
#   - a read error fails OPEN (everyone allowed) rather than locking you out.
#
# One IP per line. Blank lines and lines starting with '#' are ignored.
#
# --- add your address(es) below this line ---