[Web] make SameSite policy and cookie name configurable via vars.local.inc

2025-10-06 11:00:03 +02:00
parent 922d173540
commit 1ef0149076
2 changed files with 9 additions and 2 deletions
@@ -153,6 +153,13 @@ $LOG_PAGINATION_SIZE = 50;
 // Session lifetime in seconds
 $SESSION_LIFETIME = 10800;

+// Session SameSite Policy
+// Use "None", "Lax" or "Strict"
+$SESSION_SAMESITE_POLICY = "Lax";
+
+// Name of the session cookie
+$SESSION_NAME = "MCSESSID";
+
 // Label for OTP devices
 $OTP_LABEL = "mailcow UI";