Strenghten default Security options in IDP

[cascardo/ipsilon.git] / templates / install / ipsilon.conf

diff --git a/templates/install/ipsilon.conf b/templates/install/ipsilon.conf
index 357a3a7..8ab17d1 100644 (file)
--- a/templates/install/ipsilon.conf
+++ b/templates/install/ipsilon.conf
@@ -11,4 +11,6 @@ tools.sessions.on = True
 tools.sessions.storage_type = "file"
 tools.sessions.storage_path = "${datadir}/sessions"
 tools.sessions.timeout = 60
+tools.sessions.httponly = ${secure}
+tools.sessions.secure = ${secure}
 tools.protect.on = True