diff --git a/.env.example b/.env.example
index 33718b4..3c3ceb8 100644
--- a/.env.example
+++ b/.env.example
@@ -72,6 +72,8 @@ AWS_USE_PATH_STYLE_ENDPOINT=false
 
 VITE_APP_NAME="${APP_NAME}"
 
+SESSION_SECURE_COOKIE=true
+
 # Stoic is the headless CMS, proxied at /stoic/ behind the app in prod (see docker/nginx/prod.conf)
 STOIC_SECRET=dev-secret-change-me
 STOIC_SSO_SECRET=dev-sso-secret-change-me