custom ‘allow’ nginx directive based on VIRTUAL_ALLOW

implementation from https://github.com/jwilder/nginx-proxy/issues/36