Configure Instance on a different domain

How to configure a single Remark42 instance for multiple domains

What doesn't work so far?

Unless discussion #1139 has a marked answer, authorisation using oAuth like GitHub or Google is impossible on domains other than the original one. Telegram, Email and anonymous auth would work everywhere.

Setup

Set ALLOWED_HOSTS="'self',example1.org,example2.org" with your domain names and AUTH_SAME_SITE=none.

The 'self' in ALLOWED_HOSTS value means "domain where Remark42 is installed on" and needed if you want remark42.example.com/web/ to work in case you want to test something with it.

Technical details

ALLOWED_HOSTS sets CSP frame-ancestors, which, once enabled, limits the domains where Remark42 would work. The default value is * so that it would work on any domain`.

AUTH_SAME_SITE sets the SAME_SITE attribute for authorisation cookies, allowing Remark42 either on the original domain and subdomains there (default value, which equals to Lax) or allows setting authorisation cookies on any domain where remark42 is shown (None setting).

Here are all possible combinations of these two:

• Default setup with unaltered variables: comments are shown on any domain, but the authorisation wouldn't work anywhere, except on the same domain Remark42 is installed on and subdomains of it.
• ALLOWED_HOSTS set to a set of domains: comments are shown only on listed domains, and authorisation wouldn't work anywhere, expect on the same domain Remark42 is installed on and subdomains of it.
• AUTH_SAME_SITE set to None: comments are shown on any domain. The authorisation would work anywhere.
• ALLOWED_HOSTS set to a set of domains and AUTH_SAME_SITE set to None: comments are shown on listed domains. The authorisation would work on all of them.