* Enable secure cookie flag for https only * Disable force_ssl for .onion hosts only Co-authored-by: Aiden McClelland <me@drbonez.dev>
		
			
				
	
	
		
			6 lines
		
	
	
	
		
			166 B
		
	
	
	
		
			Ruby
		
	
	
	
	
	
			
		
		
	
	
			6 lines
		
	
	
	
		
			166 B
		
	
	
	
		
			Ruby
		
	
	
	
	
	
# Be sure to restart your server when you modify this file.
 | 
						|
 | 
						|
Rails.application.config.session_store :cookie_store, {
 | 
						|
  key: '_mastodon_session',
 | 
						|
  same_site: :lax,
 | 
						|
}
 |