Skip to content

Commit 8830559

Browse files
authored
Merge pull request #51 from egelhaus/update-docs-https
2 parents 5a90fca + 4888280 commit 8830559

File tree

1 file changed

+7
-3
lines changed

1 file changed

+7
-3
lines changed

components/snippets/installation-pre-reqs.mdx

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,11 +6,15 @@ This section will ask you to install & configure several services exaplained bel
66

77
#### HTTPS is required (or localhost)
88

9-
Postiz marks it's login cookies as Secure, which means you must run it either on localhost, or behind HTTPS - this is called a "secure context" in modern web browsers.
9+
Postiz marks it's login cookies as Secure, this is called secure context in modern web browsers.
1010

11-
If you are not running either HTTPS or on localhost, then you will not be able to login, as your browser will refuse to send the login cookie.
11+
If you want to use an secure Login Process, you need to set up an Certificate, which can be done via Reverse Proxy like Caddy or Nginx.
1212

13-
Postiz will not generate your HTTPS certificates for you, and it's servers cannot yet be configured to use a HTTPS certificate. This means you must use a reverse proxy to handle HTTPS. Documentation on popular reverse proxies can be found in the [reverse proxies](/reverse-proxies/) section, and if you've never used a reverse proxy with docker compose before, then [caddy](/reverse-proxies/caddy/) is recommended.
13+
If you cannot use a certificate (HTTPS), add the following environment variable to your `.env` file:
14+
```env
15+
NOT_SECURED=true
16+
```
17+
**Security Warning**: Setting `NOT_SECURED=true` disables secure cookie requirements. This should only be used in development environments or when you fully understand the security implications. Not recommended for production use.
1418

1519
#### Network Ports
1620

0 commit comments

Comments
 (0)