allow vhost & resources