feat: add server IP allowlist (#2586)