Build + offer docker image and docker-compose.yml file for easier self-hosting

Tweak login and auth for IP-based setups and setups without email enabled.

lib/auth.ts

@@ -18,6 +18,8 @@ export interface JwtData {
   };
 }
 
+const isBaseUrlAnIp = () => /^(?!0)(?!.*\.$)((1?\d?\d|25[0-5]|2[0-4]\d)(\.|$)){4}$/.test(baseUrl);
+
 const textToData = (text: string) => new TextEncoder().encode(text);
 
 export const dataToText = (data: Uint8Array) => new TextDecoder().decode(data);
@@ -152,15 +154,18 @@ export async function logoutUser(request: Request) {
     name: COOKIE_NAME,
     value: '',
     expires: tomorrow,
-    domain: isRunningLocally(request)
-      ? 'localhost'
-      : baseUrl.replace('https://', '').replace('http://', '').split(':')[0],
     path: '/',
     secure: isRunningLocally(request) ? false : true,
     httpOnly: true,
     sameSite: 'Lax',
   };
 
+  if (!isBaseUrlAnIp()) {
+    cookie.domain = isRunningLocally(request)
+      ? 'localhost'
+      : baseUrl.replace('https://', '').replace('http://', '').split(':')[0];
+  }
+
   const response = new Response('Logged Out', {
     status: 303,
     headers: { 'Location': '/', 'Content-Type': 'text/html; charset=utf-8' },
@@ -203,13 +208,18 @@ export async function createSessionCookie(
     name: COOKIE_NAME,
     value: token,
     expires: newSession.expires_at,
-    domain: isRunningLocally(request) ? 'localhost' : baseUrl.replace('https://', ''),
     path: '/',
     secure: isRunningLocally(request) ? false : true,
     httpOnly: true,
     sameSite: 'Lax',
   };
 
+  if (!isBaseUrlAnIp()) {
+    cookie.domain = isRunningLocally(request)
+      ? 'localhost'
+      : baseUrl.replace('https://', '').replace('http://', '').split(':')[0];
+  }
+
   setCookie(response.headers, cookie);
 
   return response;
@@ -227,13 +237,18 @@ export async function updateSessionCookie(
     name: COOKIE_NAME,
     value: token,
     expires: userSession.expires_at,
-    domain: isRunningLocally(request) ? 'localhost' : baseUrl.replace('https://', ''),
     path: '/',
     secure: isRunningLocally(request) ? false : true,
     httpOnly: true,
     sameSite: 'Lax',
   };
 
+  if (!isBaseUrlAnIp()) {
+    cookie.domain = isRunningLocally(request)
+      ? 'localhost'
+      : baseUrl.replace('https://', '').replace('http://', '').split(':')[0];
+  }
+
   setCookie(response.headers, cookie);
 
   return response;