@baris @genesisx
It's seemed nginx to be blamed.
nginx config
server {
server_name balabala.com;
balabala
balbalba
}
If url of Nodebb config is set to your server ip
"url": "http://111.111.111.111",
and nginx conf stay the same.
Visit http://111.111.111.111, everything works well.
However, if url of Nodebb config is set to your domian
"url": "http://balabala.com",
and nginx conf stay the same.
Visit http://balabala.com, then "forbidden" comes out when register, "invalid csrf token" in ACP log.
