trust recipe proxy hosts for CSRF checks

astro.app.config.mjs

@@ -9,5 +9,12 @@ export default defineConfig({
   outDir: "./dist/app",
   adapter: node({ mode: "standalone" }),
   integrations: [preact()],
+  security: {
+    checkOrigin: true,
+    allowedDomains: [
+      { hostname: "recipes.uuard.com", protocol: "https" },
+      { hostname: "recipes-admin.uuard.com", protocol: "https" },
+    ],
+  },
   vite: { server: { fs: { allow: ["."] } } },
 });