fix allowed_hosts for productionvm