Nginx allowlist or denylist

# explicit allowlist
Server {
    allow 192.168.1.0/24;  # entire subnet
    deny all;
}