From a0b45733bc23da3d98dc1f7f5a69d8e3a0a166b2 Mon Sep 17 00:00:00 2001
From: Joshua Potter <jrpotter2112@gmail.com>
Date: Sat, 18 May 2024 12:16:55 -0600
Subject: [PATCH] Use check_origin for prod domains.

---
 config/prod.exs | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/config/prod.exs b/config/prod.exs
index 9bf09f6..1f2ddbf 100644
--- a/config/prod.exs
+++ b/config/prod.exs
@@ -5,7 +5,12 @@ import Config
 # manifest is generated by the `mix assets.deploy` task,
 # which you should run after static files are built and
 # before starting your production server.
-config :portfolio, PortfolioWeb.Endpoint, cache_static_manifest: "priv/static/cache_manifest.json"
+config :portfolio, PortfolioWeb.Endpoint,
+  cache_static_manifest: "priv/static/cache_manifest.json",
+  check_origin: [
+    "https://jrpotter.com",
+    "https://www.jrpotter.com"
+  ]
 
 # Configures Swoosh API Client
 config :swoosh, api_client: Swoosh.ApiClient.Finch, finch_name: Portfolio.Finch