Make cookies secure via nginx

edivorce/settings/openshift.py

@@ -80,3 +80,5 @@ BASICAUTH_PASSWORD = os.getenv('BASICAUTH_PASSWORD', '')
 
 # Only send session cookies over SSL
 SESSION_COOKIE_SECURE=True
+SESSION_COOKIE_PATH = PROXY_URL_PREFIX
+SESSION_EXPIRE_AT_BROWSER_CLOSE = True

openshift/nginx-proxy/conf.d/server.conf

@@ -14,6 +14,7 @@ server {
     location / {
         proxy_pass http://edivorce-django:8080;
         proxy_pass_request_headers on;
+        proxy_cookie_domain ~(?P<domain>(justice.gov.bc.ca))$ "$domain; Secure";
 
         # remove directories from incoming requests;
         rewrite ^/divorce-dev$ / last;
@@ -39,6 +40,7 @@ server {
 
         proxy_pass http://edivorce-django:8080;
         proxy_pass_request_headers on;
+        proxy_cookie_domain ~(?P<domain>(justice.gov.bc.ca))$ "$domain; Secure";
     }
 
     # For status of ngnix service