Expand website and game trackers

svelte.config.js

@@ -11,7 +11,16 @@ const config = {
 		// adapter-auto only supports some environments, see https://kit.svelte.dev/docs/adapter-auto for a list.
 		// If your environment is not supported, or you settled on a specific environment, switch out the adapter.
 		// See https://kit.svelte.dev/docs/adapters for more information about adapters.
-		adapter: adapter()
+		adapter: adapter(),
+		csrf: {
+			// vite dev has no way to trust X-Forwarded-Proto, so it thinks every
+			// request is http:// even though Caddy terminates TLS in front of it,
+			// causing a scheme mismatch against the browser's https Origin header.
+			// The built adapter-node server (production) handles this correctly via
+			// ORIGIN/PROTOCOL_HEADER, so only relax the check in dev.
+			// checkOrigin: process.env.NODE_ENV === 'production',
+			trustedOrigins: ['https://dev.stanrunge.dev']
+		}
 	}
 };