Fix up nginx config to only allow access from TrustedCIDR