d2114523a5
* fix: passkeys behind TLS reverse proxy Add passkeyPublicOrigin and wire it through passkey routes so origin/rpId match the browser when dev runs behind nginx. Expose dev-only /_emdash/api/dev/passkey-url, add admin messaging for insecure WebAuthn contexts, nginx repro under demos/simple, and direct kysely dependency for the simple demo Node adapter bundle. Made-with: Cursor * docs: add passkeyPublicOrigin to configuration reference Adds the new passkeyPublicOrigin option and reverse proxy guidance to the public-facing configuration docs as requested in PR review. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * update tests and more docs * fix: add missing refresh-server-pat fixture and restore docs heading --------- Co-authored-by: Joseph Eftekhari <jdeftekhari@gmail.com> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
45 lines
1.1 KiB
JavaScript
45 lines
1.1 KiB
JavaScript
import node from "@astrojs/node";
|
|
import react from "@astrojs/react";
|
|
import { auditLogPlugin } from "@emdash-cms/plugin-audit-log";
|
|
import { defineConfig } from "astro/config";
|
|
import emdash, { local } from "emdash/astro";
|
|
import { sqlite } from "emdash/db";
|
|
|
|
export default defineConfig({
|
|
output: "server",
|
|
adapter: node({
|
|
mode: "standalone",
|
|
}),
|
|
// Example: allowed domains for reverse proxy
|
|
// security: {
|
|
// allowedDomains: [
|
|
// { hostname: "emdash.local", protocol: "http" },
|
|
// { hostname: "emdash.local", protocol: "https" },
|
|
// ],
|
|
// },
|
|
image: {
|
|
layout: "constrained",
|
|
responsiveStyles: true,
|
|
},
|
|
integrations: [
|
|
react(),
|
|
emdash({
|
|
database: sqlite({ url: "file:./data.db" }),
|
|
storage: local({
|
|
directory: "./uploads",
|
|
baseUrl: "/_emdash/api/media/file",
|
|
}),
|
|
plugins: [auditLogPlugin()],
|
|
// HTTPS reverse proxy: uncomment so passkey verify matches browser origin
|
|
// passkeyPublicOrigin: "https://emdash.local:8443",
|
|
}),
|
|
],
|
|
devToolbar: { enabled: false },
|
|
// Example: allowed hosts for reverse proxy
|
|
// vite: {
|
|
// server: {
|
|
// allowedHosts: ["emdash.local"],
|
|
// },
|
|
// },
|
|
});
|