I left the domains hard-coded for the redirects in our NGINX config, which was breaking authentication for versions of the site that don't use that domain. This updates the config to use the domains supplied via environment variable.