add allowed_hosts to variables