allow git access from behind the NAT instance