From 5399b36027bf336ca0415e9d7e063ace3530c295 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?dni=20=E2=9A=A1?= Date: Thu, 16 Apr 2026 11:30:40 +0200 Subject: [PATCH] chore: revert changing default auth (#3934) --- lnbits/settings.py | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/lnbits/settings.py b/lnbits/settings.py index 94ba5dda9..cc2a4d2e8 100644 --- a/lnbits/settings.py +++ b/lnbits/settings.py @@ -1007,9 +1007,7 @@ class EnvSettings(LNbitsSettings): debug_database: bool = Field(default=False) bundle_assets: bool = Field(default=True) # When enabled, auth cookies require HTTPS and SSO will reject insecure HTTP. - # Keep disabled by default so local HTTP installs continue to work unless - # operators explicitly opt into HTTPS-only auth cookies. - auth_https_only: bool = Field(default=False) + auth_https_only: bool = Field(default=True) host: str = Field(default="127.0.0.1") port: int = Field(default=5000, gt=0) forwarded_allow_ips: str = Field(default="*")