// @ts-check import { defineConfig } from 'astro/config'; import tailwindcss from '@tailwindcss/vite'; import react from '@astrojs/react'; import node from '@astrojs/node'; // https://astro.build/config export default defineConfig({ output: 'server', integrations: [react()], // Astro's CSRF Origin/Host check fires on form-encoded POSTs and compares // protocols. Behind a TLS-terminating proxy (Traefik), Node sees http:// // locally while the browser sends Origin: https://, which falsely fails the // check. SameSite=Strict on the auth cookie + server-side token validation // handle CSRF instead. security: { checkOrigin: false, }, image: { service: { entrypoint: 'astro/assets/services/noop' } }, vite: { plugins: [tailwindcss()] }, adapter: node({ mode: 'standalone' }) });