diff --git a/docker/nginx/conf.d/garage.hantim.net.conf b/docker/nginx/conf.d/garage.hantim.net.conf
index 648902b..f1d1971 100644
--- a/docker/nginx/conf.d/garage.hantim.net.conf
+++ b/docker/nginx/conf.d/garage.hantim.net.conf
@@ -25,6 +25,11 @@ server {
     include /etc/nginx/conf.d/security-headers.inc;
 
     location / {
+        # restrict to argento (home IP)
+        # update if IP changes: dig +short argento.ddns.net
+        allow 173.79.207.76;
+        deny all;
+
         proxy_pass http://garage:3903;
     }
 }