This wasn’t asked, but using reverse proxy front of Discourse (as ie. Nginx or Varnish) such allowlist is really trivial.