Secure cookies

The cookies are not secure by default with heimdall, we can force it through nginx.
This commit is contained in:
samsepi0l
2023-12-14 14:51:48 +01:00
committed by GitHub
parent 8ea6907613
commit 6ec92a19fd
+2
View File
@@ -35,6 +35,8 @@ server {
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
proxy_cookie_path / "/; Secure; SameSite=strict; HttpOnly";
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app heimdall;