@baris @genesisx
It's seemed nginx to be blamed.
nginx config
server { server_name balabala.com; balabala balbalba }If url of Nodebb config is set to your server ip
"url": "http://111.111.111.111",and nginx conf stay the same.
Visit http://111.111.111.111, everything works well.
However, if url of Nodebb config is set to your domian
"url": "http://balabala.com",and nginx conf stay the same.
Visit http://balabala.com, then "forbidden" comes out when register, "invalid csrf token" in ACP log.
