Merge pull request #2069 from scpwiki/cross-origin

Add setting to disable csrf on local
scpwiki · Sep 8, 2024 · 86c5b23 · 86c5b23
2 parents cd4d688 + e44e0cf
commit 86c5b23
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 2 deletions.
diff --git a/framerail/svelte.config.js b/framerail/svelte.config.js
@@ -8,7 +8,11 @@ const config = {
   preprocess: preprocess(),
 
   kit: {
-    adapter: adapter()
+    adapter: adapter(),
+    csrf: {
+      // Allow flexible hosts on local, since we don't have real DNS
+      checkOrigin: process.env.FRAMERAIL_ENV !== "local"
+    }
   },
 
   compilerOptions: {

diff --git a/install/aws/prod/docker/web/Dockerfile b/install/aws/prod/docker/web/Dockerfile
@@ -23,7 +23,7 @@ RUN \
 # Run command
 USER node:node
 ENV NODE_ENV=production
-ENV PORT=3000
+ENV FRAMERAIL_ENV=prod
 EXPOSE 3000
 
 CMD ["/usr/local/bin/node", "build"]
diff --git a/install/dev/digitalocean/web/Dockerfile b/install/dev/digitalocean/web/Dockerfile
@@ -23,6 +23,7 @@ RUN \
 # Run command
 USER node:node
 ENV NODE_ENV=production
+ENV FRAMERAIL_ENV=dev
 ENV PORT=3000
 EXPOSE 3000
 

diff --git a/install/local/dev/web/Dockerfile b/install/local/dev/web/Dockerfile
@@ -13,4 +13,5 @@ WORKDIR /app
 RUN pnpm install
 
 EXPOSE 3000
+ENV FRAMERAIL_ENV=local
 CMD ["pnpm", "dev"]