fix: filter allowed hosts in nginx #1434