Create src/middleware/adminIp.js

src/middleware/adminIp.js

@@ -0,0 +1,6 @@
+import { ADMIN_IP_ALLOWLIST } from "../config/security.js";
+
+export function adminIp(req, res, next) {
+  if (!ADMIN_IP_ALLOWLIST.includes(req.ip)) return res.sendStatus(403);
+  next();
+}