diff --git a/web/app_dev.php b/web/app_dev.php
index 5a05245..08a5a28 100644
--- a/web/app_dev.php
+++ b/web/app_dev.php
@@ -1,5 +1,7 @@
 <?php
 
+require 'dev-ips.php';
+
 use Symfony\Component\HttpFoundation\Request;
 
 // If you don't want to setup permissions the proper way, just uncomment the following PHP line
@@ -10,10 +12,7 @@ use Symfony\Component\HttpFoundation\Request;
 // Feel free to remove this, extend it, or make something more sophisticated.
 if (isset($_SERVER['HTTP_CLIENT_IP'])
     || isset($_SERVER['HTTP_X_FORWARDED_FOR'])
-    || !in_array(@$_SERVER['REMOTE_ADDR'], array(
-        '127.0.0.1',
-        '::1',
-    ))
+    || !in_array(@$_SERVER['REMOTE_ADDR'], $dev_ips)
 ) {
     header('HTTP/1.0 403 Forbidden');
     exit('You are not allowed to access this file. Check '.basename(__FILE__).' for more information.');
diff --git a/web/config.php b/web/config.php
index 7ac1cbe..67213b8 100644
--- a/web/config.php
+++ b/web/config.php
@@ -1,13 +1,12 @@
 <?php
 
+require 'dev-ips.php';
+
 if (!isset($_SERVER['HTTP_HOST'])) {
     exit('This script cannot be run from the CLI. Run it from a browser.');
 }
 
-if (!in_array(@$_SERVER['REMOTE_ADDR'], array(
-    '127.0.0.1',
-    '::1',
-))) {
+if (!in_array(@$_SERVER['REMOTE_ADDR'], $dev_ips)) {
     header('HTTP/1.0 403 Forbidden');
     exit('This script is only accessible from localhost.');
 }
diff --git a/web/dev-ips.php b/web/dev-ips.php
new file mode 100644
index 0000000..fc5a628
--- /dev/null
+++ b/web/dev-ips.php
@@ -0,0 +1,5 @@
+<?php
+$dev_ips = array(
+	'127.0.0.1',
+	'::1',
+);