tighter ip constraint

Gemfile

@@ -116,6 +116,11 @@ gem "progressbar"
 group :production, :staging do
   gem "rails_semantic_logger"
 end
+
+group :production do
+  gem "sd_notify"
+end
+
 # gem "pg_party"
 
 gem "tailwindcss-rails", "~> 2.0"

Gemfile.lock

@@ -288,6 +288,7 @@ GEM
       ruby-prof (~> 1.0)
     rubyzip (2.3.2)
     rufo (0.15.1)
+    sd_notify (0.1.1)
     selenium-webdriver (4.8.0)
       rexml (~> 3.2, >= 3.2.5)
       rubyzip (>= 1.2.2, < 3.0)
@@ -387,6 +388,7 @@ DEPENDENCIES
   ruby-prof
   ruby-prof-speedscope
   rufo
+  sd_notify
   selenium-webdriver
   shakapacker
   sprockets-rails

app/lib/vpn_only_route_constraint.rb

@@ -5,7 +5,7 @@ class VpnOnlyRouteConstraint
       request.ip == "127.0.0.1" || request.ip == "::1"
     else
       # curtus IP on vpn
-      request.ip == "10.200.0.3" || request.ip == "127.0.0.1"
+      request.ip == "10.200.0.3"
     end
   end
 end