Make secure cookie configurable

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
This commit is contained in:
Sacha Al Himdani
2025-11-04 17:09:51 +01:00
parent 549775fd71
commit fee5a9232e
20 changed files with 94 additions and 57 deletions

View File

@@ -363,6 +363,12 @@ Secret key used for signing session cookies. Should be at least 32 bytes for sec
Session cookie lifetime in hours.
#### `auth.cookie.secure` (boolean)
**Default**: `true`
Controls whether the Secure flag is set on session cookies. When true, cookies are only sent over HTTPS connections.
#### `auth.password.pepper` (string)
**Default**: Auto-generated