From 51c003cb0da2994888c23bf1bd19ba681297129b Mon Sep 17 00:00:00 2001
From: Simon Franken <mail@simon-franken.de>
Date: Wed, 18 Feb 2026 20:18:55 +0100
Subject: [PATCH] update

---
 backend/src/index.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/backend/src/index.ts b/backend/src/index.ts
index d04ff9e..56772ce 100644
--- a/backend/src/index.ts
+++ b/backend/src/index.ts
@@ -22,6 +22,8 @@ async function main() {
 
   const app = express();
 
+  app.set("trust proxy", 1);
+
   // CORS
   app.use(
     cors({
@@ -42,7 +44,7 @@ async function main() {
       saveUninitialized: false,
       name: "sessionId",
       cookie: {
-        secure: false,
+        secure: config.nodeEnv === "production",
         httpOnly: true,
         maxAge: config.session.maxAge,
         sameSite: "lax",