M41: harden trust boundaries and delivery
This commit is contained in:
+2
-3
@@ -13,9 +13,8 @@ POSTGRES_PASSWORD=mobilityops
|
||||
# this (or MOBILITYOPS_CALLBACK_TOKEN) still holds its placeholder value.
|
||||
APP_SECRET=replace-in-production
|
||||
TZ=Europe/Brussels
|
||||
# Session cookie Secure flag. Keep false for LAN/plain-HTTP deployments (including the
|
||||
# current Unraid review environment); set true only once MobilityOps is served over HTTPS,
|
||||
# otherwise browsers will silently drop the cookie and no one can log in.
|
||||
# Session cookie Secure flag. Development on localhost may use false; production startup
|
||||
# requires both an HTTPS public URL and this value set to true.
|
||||
SESSION_COOKIE_SECURE=false
|
||||
|
||||
# Optional OpenID Connect login. Public demo role buttons remain available when enabled.
|
||||
|
||||
Reference in New Issue
Block a user