Fix: set trustHost to true for production auth

src/lib/auth.ts

@@ -54,7 +54,7 @@ async function verify2faCode(userId: number, code: string): Promise<boolean> {
 }
 
 export const { handlers, signOut, auth } = NextAuth({
-	trustHost: env.NODE_ENV !== "production",
+	trustHost: true,
 	secret: env.AUTH_SECRET,
 	session: { strategy: "jwt", maxAge: 24 * 60 * 60 },
 	pages: { signIn: "/login", error: "/login" },