diff --git a/pass/app.js b/pass/app.js
index 91c7adc05437393b4fd6a911873c8282026d305c..2d2806af239de238e61f4df7cb65e822ee323c25 100644
--- a/pass/app.js
+++ b/pass/app.js
@@ -105,10 +105,7 @@ app.use((req, res, next) => {
 
   if (
     allowed_hosts.includes(req.hostname) ||
-    (process.env.NODE_ENV === "development" &&
-      req.hostname.match(
-        /^(localhost|.*\.ngrok-free\.app|.*\.review\.metager\.de)$/
-      ))
+    process.env.NODE_ENV === "development"
   ) {
     let proto = req.get("x-forwarded-proto") ?? req.protocol;
     let host = req.get("x-forwarded-host") ?? req.get("host");
diff --git a/pass/config/default.json b/pass/config/default.json
index 1f390d4a0211584c0b13120d242d0c794be9fc6c..8f0e1910e663a26381d5f59761236b67adde61d8 100644
--- a/pass/config/default.json
+++ b/pass/config/default.json
@@ -83,6 +83,11 @@
   },
   "crypto": {
     "hmac_integrity_seed": "<insert_secret_for_hmac_seed>",
+    "private_key": {
+      "seed": "<insert_secret_token_seed>",
+      "bit_length": 2048,
+      "date_format": "YYYY-MM"
+    },
     "tokens": {
       "private_key": {
         "seed": "<insert_secret_token_seed>",