diff --git a/config/initializers/session_store.rb b/config/initializers/session_store.rb index 5d39a79b9..e225e5720 100644 --- a/config/initializers/session_store.rb +++ b/config/initializers/session_store.rb @@ -7,10 +7,11 @@ expires_after = app_config_expires_after.positive? ? app_config_expires_after : # see for configuration options, # httponly has been added in +servers = ApplicationConfig["REDIS_SESSIONS_URL"] || ApplicationConfig["REDIS_URL"] Rails.application.config.session_store :redis_store, key: ApplicationConfig["SESSION_KEY"], - servers: ApplicationConfig["REDIS_URL"], + servers: servers, expire_after: expires_after, signed: true, - secure: Rails.env.production?, + secure: false, httponly: true