Outsource allowed_ips to external config