Auth Fix

Fixed an issue where the user would be redirected to a localhost address because an auth url was not set in the env.

.env.business.example

@@ -38,6 +38,11 @@ DATABASE_PASSWORD="replace-me"
 AUTH_SECRET="replace-me-with-a-32-byte-random-string"
 # Auth.js needs to trust the host it's served from when not on localhost:3000.
 AUTH_TRUST_HOST="true"
+# Explicit, not just inferred from AUTH_TRUST_HOST + request headers —
+# header-based detection (Host/X-Forwarded-Host) behaves inconsistently
+# across reverse-proxy setups, and a wrong guess sends every post-sign-in
+# redirect to the wrong origin. Must match DOMAIN above exactly.
+AUTH_URL="https://example-business.example.com"
 NEXT_PUBLIC_APP_URL="https://example-business.example.com"
 # One-time setup token the installation wizard (/install) requires before
 # it will create the first business/administrator — generate with: