feat: implement DASHBOARD_ORIGIN for invite and email links, enhancing self-hosted configuration and updating related documentation

This commit is contained in:
Rotimi Best
2026-03-11 17:00:44 +01:00
parent c5c65b96d7
commit fd11bdd4b0
14 changed files with 41 additions and 33 deletions
+2 -1
View File
@@ -37,8 +37,9 @@ PUBLIC_IS_SELFHOSTED=true
# Local: http://api:3081 | Production: http://api:3081 (always internal)
PRIVATE_SERVER_URL=http://api:3081
# Dashboard origin for SvelteKit CSRF protection
# Dashboard origin for SvelteKit CSRF protection and invite/email links
# Local: http://localhost:3082 | Production: https://app.yourdomain.com
# When set, invite emails and other links point here instead of app.classroomio.com
DASHBOARD_ORIGIN=http://localhost:3082
# CSP: external domains allowed by Content-Security-Policy (required when self-hosted)