Add AUTH_TRUST_HOST for reverse proxy deployments

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.env.example

@@ -7,6 +7,7 @@ POSTGRES_DB="drinktracker"
 # NextAuth
 NEXTAUTH_URL="http://localhost:3000"
 NEXTAUTH_SECRET="generate-with: openssl rand -base64 32"
+AUTH_TRUST_HOST="true"  # Set to true when behind a reverse proxy
 
 # OAuth Providers
 GOOGLE_CLIENT_ID=""

install.sh

@@ -270,6 +270,7 @@ POSTGRES_DB="${PG_DB}"
 # ─── NextAuth ────────────────────────────────────────────
 NEXTAUTH_URL="${APP_URL}"
 NEXTAUTH_SECRET="${AUTH_SECRET}"
+AUTH_TRUST_HOST="true"
 
 # ─── OAuth Providers ─────────────────────────────────────
 GOOGLE_CLIENT_ID="${GOOGLE_CID}"