docs: Update DDEV usage - set .ddev.site explicitly for server.cors.origin, add support for custom https_router_port for server.origin

[mandrasch]

Description

Changes:

1. use \.ddev\.site explicitly for regex for server.cors.origin, as proposed by vitejs core maintainer - otherwise the attack surface is still open via sites with .site TLD

2. support custom router-https-port (test via ddev config --router-https-port 8443 && ddev restart - process.env.DDEV_PRIMARY_URL will then output "https://my-project.ddev.site:8443". Therefore we need to strip out 8443 first, before setting the server.origin setting. This is also relevant because DDEV auto-selects a router port if 80/443 is already occupied since last year (https://ddev.com/blog/release-v1235-auto-port-assignment/). This needs a tiny change in config/vite.php as well.

3. add info about official article about Vite on ddev.com (https://ddev.com/blog/working-with-vite-in-ddev/) where users find out more information and where DDEV maintainers try to keep all further infos up-to-date.

Hope this will be it, fingers crossed. Thanks very much for providing this plugin!

(Demo repo with this config is available here: https://github.com/mandrasch/ddev-craftcms-vite)

Related issues

• docs: use regex for Vite server.cors to support additional hostnames ddev/ddev.com#313
• Update docs for DDEV usage #92

[mandrasch]

Okay, one question is remaining. For using ddev config --router-https-port 8443 && ddev restart,
config/vite.php might need to be changed from

        'devServerPublic' => App::env('PRIMARY_SITE_URL') . ':3000',

to

        'devServerPublic' => preg_replace('/:\d+$/', '', App::env('PRIMARY_SITE_URL')) . ':3000',

to also support primary URLs like https://my-project.ddev.site:8443. I'll need to test this.

[mandrasch]

Okay, one question is remaining. For using ddev config --router-https-port 8443 && ddev restart, config/vite.php might need to be changed from

        'devServerPublic' => App::env('PRIMARY_SITE_URL') . ':3000',

to

        'devServerPublic' => preg_replace('/:\d+$/', '', App::env('PRIMARY_SITE_URL')) . ':3000',

to also support primary URLs like https://my-project.ddev.site:8443. I'll need to test this.

Just tested it, it is indeed needed to strip away the custom https port via

        'devServerPublic' => preg_replace('/:\d+$/', '', App::env('PRIMARY_SITE_URL')) . ':3000',

Updated the PR, ready for review ✅

[khalwat]

Thanks again, appreciate it.