From 247a21b6a70a7641a52c587a700e6c6212602653 Mon Sep 17 00:00:00 2001
From: JP Scott <tenseconddelay@gmail.com>
Date: Sun, 1 Mar 2026 16:16:00 -0700
Subject: [PATCH] Add AUTH_TRUST_HOST for reverse proxy deployments

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .env.example | 1 +
 install.sh   | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.env.example b/.env.example
index ba949b0..cdcc62a 100644
--- a/.env.example
+++ b/.env.example
@@ -7,6 +7,7 @@ POSTGRES_DB="drinktracker"
 # NextAuth
 NEXTAUTH_URL="http://localhost:3000"
 NEXTAUTH_SECRET="generate-with: openssl rand -base64 32"
+AUTH_TRUST_HOST="true"  # Set to true when behind a reverse proxy
 
 # OAuth Providers
 GOOGLE_CLIENT_ID=""
diff --git a/install.sh b/install.sh
index e2479aa..76790c6 100644
--- a/install.sh
+++ b/install.sh
@@ -270,6 +270,7 @@ POSTGRES_DB="${PG_DB}"
 # ─── NextAuth ────────────────────────────────────────────
 NEXTAUTH_URL="${APP_URL}"
 NEXTAUTH_SECRET="${AUTH_SECRET}"
+AUTH_TRUST_HOST="true"
 
 # ─── OAuth Providers ─────────────────────────────────────
 GOOGLE_CLIENT_ID="${GOOGLE_CID}"