diff --git a/am-d-model.env b/am-d-model.env
index f99a4e4..a4676cf 100644
--- a/am-d-model.env
+++ b/am-d-model.env
@@ -1,4 +1,4 @@
-INVENIO_APP_ALLOWED_HOSTS=["invenio.am-d-model.eu"]
+INVENIO_TRUSTED_HOSTS=["invenio.am-d-model.eu"]
 INVENIO_S3_ENDPOINT_URL="https://s3.eu-west-1.amazonaws.com"
 INVENIO_S3_REGION_NAME="eu-west-1"
 INVENIO_S3_BUCKET_NAME="am-d-model-data-repository"
diff --git a/docker-compose.yaml b/docker-compose.yaml
index 073c881..6990b78 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -53,7 +53,7 @@ services:
             - INVENIO_ENV=production
 
             # Flask
-            - INVENIO_APP_ALLOWED_HOSTS=${INVENIO_APP_ALLOWED_HOSTS:-['0.0.0.0', 'localhost', '127.0.0.1']}
+            - INVENIO_TRUSTED_HOSTS=${INVENIO_TRUSTED_HOSTS:-['0.0.0.0', 'localhost', '127.0.0.1']}
 
             # Flask-SQLAlchemy
             - INVENIO_SQLALCHEMY_DATABASE_URI=postgresql+psycopg2://${POSTGRES_USER:-inveniordm}:${POSTGRES_PASSWORD:-inveniordm}@db/${POSTGRES_DB:-inveniordm}
diff --git a/invenio/invenio.cfg b/invenio/invenio.cfg
index eb1bbcb..cef1ebb 100644
--- a/invenio/invenio.cfg
+++ b/invenio/invenio.cfg
@@ -83,7 +83,7 @@ SEND_FILE_MAX_AGE_DEFAULT = 300
 # provided, the allowed hosts variable is set to localhost. In production it
 # should be set to the correct host and it is strongly recommended to only
 # route correct hosts to the application.
-APP_ALLOWED_HOSTS = ["localhost", "127.0.0.1"]
+TRUSTED_HOSTS = ["localhost", "127.0.0.1"]
 
 
 # Flask-SQLAlchemy