fix: first_install for local (#3927)

2026-04-14 14:50:20 +01:00
parent 8db76b8864
commit 385fb4f9bc
2 changed files with 45 additions and 2 deletions
@@ -1007,8 +1007,9 @@ class EnvSettings(LNbitsSettings):
    debug_database: bool = Field(default=False)
    bundle_assets: bool = Field(default=True)
    # When enabled, auth cookies require HTTPS and SSO will reject insecure HTTP.
-    # Set to false for local/dev environments that run without TLS.
-    auth_https_only: bool = Field(default=True)
+    # Keep disabled by default so local HTTP installs continue to work unless
+    # operators explicitly opt into HTTPS-only auth cookies.
+    auth_https_only: bool = Field(default=False)
    host: str = Field(default="127.0.0.1")
    port: int = Field(default=5000, gt=0)
    forwarded_allow_ips: str = Field(default="*")