Secure cookies

The cookies are not secure by default with heimdall, we can force it through nginx.
This commit is contained in:
samsepi0l 2023-12-14 14:51:48 +01:00 committed by GitHub
parent 8ea6907613
commit 6ec92a19fd
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -35,6 +35,8 @@ server {
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
proxy_cookie_path / "/; Secure; SameSite=strict; HttpOnly";
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app heimdall;