From 511265fbf2e7ca0fb4b6b8ee58e7c92c7bcb545c Mon Sep 17 00:00:00 2001
From: MickLesk <47820557+MickLesk@users.noreply.github.com>
Date: Thu, 24 Sep 2026 10:26:42 +0200
Subject: [PATCH] Let Journiv start over plain HTTP

---
 ct/journiv.sh              | 3 +++
 install/journiv-install.sh | 2 ++
 2 files changed, 5 insertions(+)

diff --git a/ct/journiv.sh b/ct/journiv.sh
index 43187fe6e..be78c60cc 100644
--- a/ct/journiv.sh
+++ b/ct/journiv.sh
@@ -45,6 +45,9 @@ function update_script() {
     $STD uv sync --locked --no-editable --no-install-project
     msg_ok "Updated Python Environment"
 
+    grep -q '^ALLOW_INSECURE_COOKIE_AUTH_OVER_HTTP=' /opt/journiv.env ||
+      echo 'ALLOW_INSECURE_COOKIE_AUTH_OVER_HTTP=true' >>/opt/journiv.env
+
     msg_info "Running Database Migrations"
     set -a
     source /opt/journiv.env
diff --git a/install/journiv-install.sh b/install/journiv-install.sh
index 0e76df4ec..3235c2613 100644
--- a/install/journiv-install.sh
+++ b/install/journiv-install.sh
@@ -53,6 +53,8 @@ EXPORT_DIR=/opt/journiv_data/exports
 IMPORT_TEMP_DIR=/opt/journiv_data/imports/temp
 DOMAIN_NAME=${LOCAL_IP}
 DOMAIN_SCHEME=http
+# Journiv refuses to start on plain HTTP without this.
+ALLOW_INSECURE_COOKIE_AUTH_OVER_HTTP=true
 PYTHONPATH=/opt/journiv
 EOF
 chmod 600 /opt/journiv.env