chore: revert changing default auth (#3934)

2026-04-16 11:30:40 +02:00
parent 385fb4f9bc
commit 5399b36027
1 changed files with 1 additions and 3 deletions
@@ -1007,9 +1007,7 @@ class EnvSettings(LNbitsSettings):
    debug_database: bool = Field(default=False)
    bundle_assets: bool = Field(default=True)
    # When enabled, auth cookies require HTTPS and SSO will reject insecure HTTP.
-    # Keep disabled by default so local HTTP installs continue to work unless
-    # operators explicitly opt into HTTPS-only auth cookies.
-    auth_https_only: bool = Field(default=False)
+    auth_https_only: bool = Field(default=True)
    host: str = Field(default="127.0.0.1")
    port: int = Field(default=5000, gt=0)
    forwarded_allow_ips: str = Field(default="*")