Allow allowed_hosts to come from environment