server { listen 80; server_name www.foo.bar; location / { root /path/to/rails/public/; passenger_enabled on; allow my.public.ip.here; deny all; } }