diff --git a/terraform/app.tf b/terraform/app.tf
index afbf5ad28..a86319a0a 100644
--- a/terraform/app.tf
+++ b/terraform/app.tf
@@ -137,28 +137,8 @@ resource "azurerm_linux_web_app" "rsm-app" {
     minimum_tls_version = "1.2"
     health_check_path   = "/health"
 
-    ip_restriction_default_action     = "Deny"
-    scm_ip_restriction_default_action = "Deny"
-
-    dynamic "ip_restriction" {
-      for_each = var.domain != null ? [1] : []
-
-      content {
-        name     = "FrontDoor"
-        action   = "Allow"
-        priority = 1
-        headers = [{
-          x_azure_fdid      = try([local.infrastructure_secrets.FRONTDOOR_ID], [])
-          x_fd_health_probe = []
-          x_forwarded_for   = []
-          x_forwarded_host  = []
-        }]
-        service_tag               = "AzureFrontDoor.Backend"
-        ip_address                = null
-        virtual_network_subnet_id = null
-
-      }
-    }
+    ip_restriction_default_action     = "Allow"
+    scm_ip_restriction_default_action = "Allow"
   }
 
   app_settings = local.rsm_env_vars
diff --git a/terraform/domains/environment_domains/vendor/modules/domains b/terraform/domains/environment_domains/vendor/modules/domains
new file mode 160000
index 000000000..eae51cf1b
--- /dev/null
+++ b/terraform/domains/environment_domains/vendor/modules/domains
@@ -0,0 +1 @@
+Subproject commit eae51cf1b82b5eb5a4fe6cafd76d50c8469b4aad
diff --git a/terraform/domains/infrastructure/vendor/modules/domains b/terraform/domains/infrastructure/vendor/modules/domains
new file mode 160000
index 000000000..26f3b77e8
--- /dev/null
+++ b/terraform/domains/infrastructure/vendor/modules/domains
@@ -0,0 +1 @@
+Subproject commit 26f3b77e849d40258b854234e9e2e3b8ef463296