renders for any *.varis.social site. maybe have it be configurable from the BE? So it only matches allowed URLs