Files
homelab-monitor/apps
jhodgkin ac768ed0db
CI / web (push) Successful in 16s
CI / api (push) Successful in 17s
fix: decouple session cookie 'secure' flag from NODE_ENV
Cookie was silently never set because NODE_ENV=production forced
secure=true while the app is served over plain HTTP on the LAN (TLS
terminates at a reverse proxy later, not here). Add explicit
COOKIE_SECURE env var, default false.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-12 20:21:52 -06:00
..