added access restrictions by IP to template config