note about punycode for internationalized domains in env example

2026-03-22 15:48:00 +02:00
parent 162b311ff1
commit 3f0223cd30
1 changed files with 4 additions and 0 deletions
--- a/.env.example
+++ b/.env.example
@@ -13,6 +13,10 @@ JWT_SECRET=
 ALTCHA_HMAC_KEY=

 # WebAuthn / Passkey (set these to your actual domain)
+# If your domain has non-ASCII characters (umlauts, accents, etc.):
+#   RP_ID uses the unicode version: feedback.example.de
+#   ORIGIN uses the punycode version: https://xn--feedbck-example.de
+# You can find the punycode version by opening the domain in a browser and copying from the address bar.
 WEBAUTHN_RP_NAME=Echoboard
 WEBAUTHN_RP_ID=example.com
 WEBAUTHN_ORIGIN=https://example.com