fix: add session_https_only to dev config and update README

This commit is contained in:
Johan Lundberg 2026-02-19 15:10:37 +01:00
parent 4242f1a40f
commit cedf2a65e2
No known key found for this signature in database
GPG key ID: A6C152738D03C7D1
4 changed files with 5 additions and 1 deletions

View file

@ -95,6 +95,7 @@ variables always take priority over file values.
| `OIDC_OP_SIGNING_KEY_PATH` | `data/keys` | OIDC signing key storage |
| `OIDC_OP_INVITE_TTL` | `86400` | Magic link expiry in seconds |
| `OIDC_OP_MANAGE_CLIENT_ID` | `manage-app` | Client ID for the management UI |
| `OIDC_OP_SESSION_HTTPS_ONLY` | `true` | Restrict session cookie to HTTPS (set `false` for local dev) |
| `OIDC_OP_CONFIG_FILE` | `porchlight.toml` | Path to TOML config file |
Database migrations run automatically on startup.