Skip to content

v0.60.11

Choose a tag to compare

View all tags
@ulsklyc ulsklyc released this 04 Jun 17:06
v0.60.11
16ce11e

Fixed

  • SESSION_SECURE now defaults to false so that direct HTTP deployments (TrueNAS, bare Docker, Podman without a reverse proxy) work out of the box. Previously the default was true, which caused login to return 200 but every subsequent request to return 401 — the browser silently dropped the Secure cookie over plain HTTP. Set SESSION_SECURE=true in your .env when running behind an HTTPS reverse proxy (Caddy, Nginx, Traefik).

Docker Compose and Podman Compose deployments are unaffected — all Compose files already injected SESSION_SECURE=false via ${SESSION_SECURE:-false} and continue to behave identically.

Full changelog: https://github.com/ulsklyc/oikos/blob/main/CHANGELOG.md

Assets 2
Loading