diff --git a/heimdall.subdomain.conf.sample b/heimdall.subdomain.conf.sample
index 8e18aa8..71a2d69 100644
--- a/heimdall.subdomain.conf.sample
+++ b/heimdall.subdomain.conf.sample
@@ -35,6 +35,8 @@ server {
         # enable for Authentik (requires authentik-server.conf in the server block)
         #include /config/nginx/authentik-location.conf;
 
+        proxy_cookie_path / "/; Secure; SameSite=strict; HttpOnly";
+        
         include /config/nginx/proxy.conf;
         include /config/nginx/resolver.conf;
         set $upstream_app heimdall;