diff --git a/ct/journiv.sh b/ct/journiv.sh
index 43187fe6e..be78c60cc 100644
--- a/ct/journiv.sh
+++ b/ct/journiv.sh
@@ -45,6 +45,9 @@ function update_script() {
     $STD uv sync --locked --no-editable --no-install-project
     msg_ok "Updated Python Environment"
 
+    grep -q '^ALLOW_INSECURE_COOKIE_AUTH_OVER_HTTP=' /opt/journiv.env ||
+      echo 'ALLOW_INSECURE_COOKIE_AUTH_OVER_HTTP=true' >>/opt/journiv.env
+
     msg_info "Running Database Migrations"
     set -a
     source /opt/journiv.env
diff --git a/install/journiv-install.sh b/install/journiv-install.sh
index 0e76df4ec..3235c2613 100644
--- a/install/journiv-install.sh
+++ b/install/journiv-install.sh
@@ -53,6 +53,8 @@ EXPORT_DIR=/opt/journiv_data/exports
 IMPORT_TEMP_DIR=/opt/journiv_data/imports/temp
 DOMAIN_NAME=${LOCAL_IP}
 DOMAIN_SCHEME=http
+# Journiv refuses to start on plain HTTP without this.
+ALLOW_INSECURE_COOKIE_AUTH_OVER_HTTP=true
 PYTHONPATH=/opt/journiv
 EOF
 chmod 600 /opt/journiv.env