Apparently, the solution is to add both domain and subdomain to check_origin in prod.exs:
config :my_app, MyAppWeb.Endpoint,
cache_static_manifest: "priv/static/cache_manifest.json",
check_origin: ["//domain.com", "//www.domain.com"]
1 Like
