From eccc7ee23789ac7b30736101340cfbb0d74562ae Mon Sep 17 00:00:00 2001
From: AdrianoDev <adrianodalpastro@gmail.com>
Date: Thu, 2 Jul 2026 11:50:47 +0200
Subject: [PATCH] fix: trust x-forwarded dietro traefik via
 security.allowedDomains

---
 astro.config.mjs | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/astro.config.mjs b/astro.config.mjs
index ad4f5f3..415f8a3 100644
--- a/astro.config.mjs
+++ b/astro.config.mjs
@@ -5,6 +5,11 @@ import sitemap from '@astrojs/sitemap';
 export default defineConfig({
   site: 'https://insanitylab.tielogic.xyz',
   output: 'server',
+  // Dietro Traefik il TLS termina al proxy: senza allowedDomains Astro ignora
+  // X-Forwarded-Proto/Host e il checkOrigin CSRF respinge i POST (403).
+  security: {
+    allowedDomains: [{ hostname: 'insanitylab.tielogic.xyz', protocol: 'https' }],
+  },
   adapter: node({ mode: 'standalone' }),
   integrations: [sitemap({ filter: (page) => !page.includes('/admin') })],
 });