I would propose better domain regexp as one presented in README .*example.com could match any-example.com or suffix that really does not fit domain based hierarchy.
Usually people would use exact domains and subdomains, or wildcard.
domain ALLOWED_DOMAINS=example.com
subdomains ALLOWED_DOMAINS=(www|api).example.com
wildcard ALLOWED_DOMAINS=([a-z]+.)?example.com
Also it would be good to explain how lua handles unicode strings. From http://lua-users.org/wiki/LuaUnicode you can get that it would be better to replace .* with [a-z]+
Valian
commented
6 years ago
I would propose better domain regexp as one presented in README
.*example.comcould matchany-example.comor suffix that really does not fit domain based hierarchy. Usually people would use exact domains and subdomains, or wildcard. domainALLOWED_DOMAINS=example.comsubdomainsALLOWED_DOMAINS=(www|api).example.comwildcardALLOWED_DOMAINS=([a-z]+.)?example.comAlso it would be good to explain how lua handles unicode strings. From http://lua-users.org/wiki/LuaUnicode you can get that it would be better to replace.*with[a-z]+