you are right, my bad. render publishes fixed CIDR ranges per region, you can get them from the dashboard and allowlist those in atlas instead of 0.0.0.0/0. updating the readme

https://github.com/EliseyRotar/eli6_movies

k

popups came from the embed iframes, not the site itself. removed allow-popups from the sandbox so they cant do that anymore

yeah same answer as the other comment — render free tier has no static IPs so you cant restrict by IP at all. strong credentials are the actual protection, not IP allowlisting

believe what you want

just made it public: https://github.com/EliseyRotar/eli6_movies

popups were coming from window.open() inside the embed iframes, removed allow-popups from the sandbox so that cant happen anymore. should be good now

yeah you were right, my bad. embeds were calling window.open() and the sandbox let it through. removed allow-popups so they cant do that anymore, video still works fine. give it another try if you want

sure, what specifically bothered you

haha thats just whatever movie was on the homepage when i took the screenshot, it pulls the backdrop from tmdb. enjoy the backrooms lol

That's a fair point. The site uses third-party embed providers (VidSrc, VixSrc, Embed.su, etc.) so the available quality depends on what each provider has — we don't host files directly.

Currently there's no quality indicator in the UI, which is a real gap. Adding a quality label (HDRip, BluRay, CAM/TS, etc.) pulled from TMDB or displayed per-server would be genuinely useful. I'll look into it — at minimum a warning badge when a CAM/TS is likely the only available source.

Thanks for the feedback.