Ory Kratos session cookie domain and secure flag for production behind a reverse proxy
Goal I am moving an Ory Kratos deployment from local development to production. Locally, Kratos runs on http://localhost with a default configuration and the self-service login flow works: after login, the ory_kratos_session cookie is set and subsequent requests are authenticated. In production, Kratos sits behind a reverse proxy that terminates TLS and serv