Falkan d40b76e8f2 fix: use $env/dynamic/private in hooks.server.ts for CSRF allowlist ...

- ALLOWED_ORIGINS and NODE_ENV now read via $env/dynamic/private so Vite dev
  server picks them up correctly from .env
- .env.example: document ALLOWED_ORIGINS with dev IP example
- .env: add http://192.168.0.94:5173 to ALLOWED_ORIGINS for local dev

2026-03-20 00:12:40 -04:00

545 B

Raw Blame History

View Raw