nyastodon/config/initializers/session_store.rb

mirror of https://git.bsd.gay/fef/nyastodon.git synced 2024-12-26 09:03:43 +01:00
# Be sure to restart your server when you modify this file.

Rails.application.config.session_store :cookie_store, key: '_mastodon_session', secure: (ENV['LOCAL_HTTPS'] == 'true')
Initial commit 2016-02-20 22:53:20 +01:00			`# Be sure to restart your server when you modify this file.`

Make cookies https-only if LOCAL_HTTPS is true, set X-Frame-Options to DENY, add permissive CORS to API controllers 2016-11-02 12:57:14 +01:00			`Rails.application.config.session_store :cookie_store, key: '_mastodon_session', secure: (ENV['LOCAL_HTTPS'] == 'true')`