Disabling the /web demo page

[DarthVi]

Is there any way to disable the demo page running on a subdomain like "remark42.domain.com/web" without breaking the retrieval of the embed.js used to show the comments? I use Caddy as reverse proxy system.

[paskal]

I think you could just redirect root of /web/ to another location but keep separate rules for files which are required: remark.mjs, remark.css, iframe.html and embed.mjs.

[paskal]

Unfortunately GitHub login on the URL you provided won't work, here are the details of the limitations of a setup on a separate domain.

[DarthVi]

But at least for my account it is working (I haven't tested with other accounts, I may ask a friend of mine to try to login). I've set ALLOWED_HOSTS to the domains where the blog is deployed and AUTH_SAME_SITE to 'none'.

I've also added the Github .svg paths to the Caddyfile handles, so now even the icon works.

[DarthVi]

I can confirm that a friend of mine was able to login via Github and write a comment. He used Firefox.
I noticed that login is not possible if the user uses Incognito Mode on Chrome, since in that case Chrome by default does not allow websites to store third-party cookies (a thing that anyway can be enabled via Chrome's Setting preferences).

[paskal]

It doesn't work on Safari either it seems.

[DarthVi]

It probably is due to a third-party cookies setting even for Safari. I can see here that by default Safari blocks cross site (third party) cookies.

The aforementioned friend of mine who also owns a Mac made a test, and I can confirm what I've written in the previous lines: with the appropriate settings, even Safari works.
This is a problem that even systems like disqus should have, since their cookies come form disqus.com and not from the blog/site using them.