diff --git a/heimdall.subdomain.conf.sample b/heimdall.subdomain.conf.sample index 9a716e5..d08beca 100644 --- a/heimdall.subdomain.conf.sample +++ b/heimdall.subdomain.conf.sample @@ -41,6 +41,8 @@ server { set $upstream_port 443; set $upstream_proto https; proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + # Enable to secure cookies. Further reading here -> https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies #proxy_cookie_path / "/; Secure; SameSite=strict; HttpOnly"; }