diff --git a/images/web/config/production.conf b/images/web/config/production.conf
index 7ebd72c2..7d3ff398 100644
--- a/images/web/config/production.conf
+++ b/images/web/config/production.conf
@@ -19,6 +19,12 @@
     RewriteRule .* https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
 
     <Location />
+        Require all granted
+        # Use "Deny from" instead of "Require not ip" to ensure compatibility
+        <RequireAll>
+            Require all granted
+            Require not ip 10.10.34.172
+        </RequireAll>
         # For TM, do not use cgimap auth.
         <If "%{HTTP_REFERER} !~ m#https://tasks(-\w+)?\.openhistoricalmap\.org/#">
             CGIPassAuth On
@@ -44,9 +50,12 @@
 
     # Relax Apache security settings
     <Directory /var/www/public>
-      AllowOverride None
-      Allow from all
-      Options -MultiViews
+        AllowOverride None
+        Options -MultiViews
+        <RequireAll>
+            Require all granted
+            Require not ip 10.10.34.172
+        </RequireAll>
     </Directory>
     
     # Additional FastCGI configurations