From b443fb010a24ce1336c8ecee6a392d8d452e515a Mon Sep 17 00:00:00 2001
From: Felipe Coutinho <felipi@live.com>
Date: Sat, 6 Jun 2026 16:31:27 -0300
Subject: [PATCH] config: adiciona origins confiaveis do Better Auth

---
 .env.example       | 7 +++++++
 docker-compose.yml | 1 +
 2 files changed, 8 insertions(+)

diff --git a/.env.example b/.env.example
index efc1c0e..6e74a16 100644
--- a/.env.example
+++ b/.env.example
@@ -17,8 +17,15 @@ POSTGRES_DB=openmonetis_db
 # Gere com: openssl rand -base64 32
 BETTER_AUTH_SECRET=your-secret-key-here-change-this
 BETTER_AUTH_URL=http://localhost:3000
+
+# Origins adicionais confiáveis para o Better Auth.
+# Útil para Cloudflare Tunnel, reverse proxy e URLs diferentes de BETTER_AUTH_URL.
+# Separe múltiplas origins por vírgula.
+# Exemplo: https://*.trycloudflare.com,https://openmonetis.seudominio.com
+BETTER_AUTH_TRUSTED_ORIGINS=
 # Defina como true para bloquear novos cadastros
 DISABLE_SIGNUP=false
+
 # Duração de sessões persistentes quando "Manter conectado" estiver marcado
 AUTH_SESSION_EXPIRES_IN_DAYS=30
 AUTH_SESSION_UPDATE_AGE_HOURS=24
diff --git a/docker-compose.yml b/docker-compose.yml
index edeb710..d997984 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -36,6 +36,7 @@ services:
       DATABASE_URL: ${DATABASE_URL:-postgresql://openmonetis:openmonetis_dev_password@db:5432/openmonetis_db}
       BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET:-}
       BETTER_AUTH_URL: ${BETTER_AUTH_URL:-http://localhost:3000}
+      BETTER_AUTH_TRUSTED_ORIGINS: ${BETTER_AUTH_TRUSTED_ORIGINS:-}
     depends_on:
       db:
         condition: service_healthy