fix: resolve CORS credentials issue

- Change CORS origin from regex pattern to exact origin from env variable
- Update Dockerfile with proper environment variables
- Fix 'Access-Control-Allow-Origin must not be wildcard with credentials' error

Fixes CORS error: Response to preflight request doesn't pass access control check

Author: Methasit-Pun

apps/backend/Dockerfile

@@ -11,9 +11,22 @@ COPY tsconfig.json .
 COPY drizzle.config.ts .
 COPY ./drizzle ./drizzle
 
+# Install debugging tools for testing
+RUN apt-get update && apt-get install -y curl netcat-openbsd && rm -rf /var/lib/apt/lists/*
+
 # COPY public public
 
-ENV NODE_ENV production
+ENV NODE_ENV=production
+ENV TRUST_PROXY=true
+ENV HOST=0.0.0.0
+ENV PORT=8080
+
+# Required environment variables for the application
+ENV DATABASE_URL="sqlite://app.db"
+ENV SUPABASE_URL="https://placeholder.supabase.co"
+ENV SUPABASE_KEY="placeholder-key"
+ENV CORS_ORIGIN="https://eventer.betich.me"
+
 CMD ["bun", "src/index.ts"]
 
 EXPOSE 8080

apps/backend/src/index.ts

@@ -11,13 +11,7 @@ import { userRouter } from "./modules/user";
 const app = new Elysia({})
 	.use(
 		cors({
-			// origin: "https://eventer.betich.me",
-			origin: /.*\.betich\.me$/,
-			// [
-			//   /.*\.betich\.me$/,
-			//   process.env.NODE_ENV === "development" ? /localhost:\d+/ : "",
-			//   env.CORS_ORIGIN || "",
-			// ],
+			origin: env.CORS_ORIGIN, // Use exact origin from environment variable
 			credentials: true,
 			preflight: true,
 			methods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"],