From 0e2cf068c8f04e02ea959565a7e33b5c6bf1ffd2 Mon Sep 17 00:00:00 2001
From: david_bai <david_bai@example.com>
Date: Thu, 26 Mar 2026 07:09:03 +0800
Subject: [PATCH] fix(deploy): use same-origin API and include www CORS origin

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
---
 docker/scripts/generate-config.sh | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/docker/scripts/generate-config.sh b/docker/scripts/generate-config.sh
index e610f7a..0d3d276 100755
--- a/docker/scripts/generate-config.sh
+++ b/docker/scripts/generate-config.sh
@@ -232,8 +232,21 @@ generate_env_file() {
             turn_enabled="true"
             ;;
         full)
-            cors_origin="https://${DOMAIN_NAME:-$LOCAL_IP}"
-            api_url="https://${DOMAIN_NAME:-$LOCAL_IP}"
+            if [[ -n "$DOMAIN_NAME" ]]; then
+                if [[ "$DOMAIN_NAME" == www.* ]]; then
+                    local bare_domain="${DOMAIN_NAME#www.}"
+                    cors_origin="https://${DOMAIN_NAME},https://${bare_domain}"
+                else
+                    cors_origin="https://${DOMAIN_NAME},https://www.${DOMAIN_NAME}"
+                fi
+            else
+                cors_origin="https://${LOCAL_IP}"
+            fi
+            if [[ "$WITH_NGINX" == "true" ]]; then
+                api_url=""
+            else
+                api_url="https://${DOMAIN_NAME:-$LOCAL_IP}"
+            fi
             ssl_mode="letsencrypt"
             turn_enabled="true"
             ;;