ulsklyc/oikos v0.60.11

on GitHub

Fixed

• SESSION_SECURE now defaults to false so that direct HTTP deployments (TrueNAS, bare Docker, Podman without a reverse proxy) work out of the box. Previously the default was true, which caused login to return 200 but every subsequent request to return 401 — the browser silently dropped the Secure cookie over plain HTTP. Set SESSION_SECURE=true in your .env when running behind an HTTPS reverse proxy (Caddy, Nginx, Traefik).

Docker Compose and Podman Compose deployments are unaffected — all Compose files already injected SESSION_SECURE=false via ${SESSION_SECURE:-false} and continue to behave identically.

Full changelog: https://github.com/ulsklyc/oikos/blob/main/CHANGELOG.md