From f49423d26ccdb6ee5ce4344a92180dfa1f1ca848 Mon Sep 17 00:00:00 2001
From: Pyjacpp <pyjacpp@crans.org>
Date: Fri, 14 Aug 2026 18:01:11 +0200
Subject: [PATCH] =?UTF-8?q?anubis=E2=80=AF:=20s=C3=A9paration=20cookies?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 modules/services/reverseproxy.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/modules/services/reverseproxy.nix b/modules/services/reverseproxy.nix
index 8dd4dfa..41a5a85 100644
--- a/modules/services/reverseproxy.nix
+++ b/modules/services/reverseproxy.nix
@@ -175,7 +175,10 @@ in
               BIND_NETWORK = "unix";
               METRICS_BIND = "/run/anubis/anubis-${vhostName}/anubis-${vhostName}-metrics.sock";
               TARGET = "unix:///run/nginx/nginx-${vhostName}.sock";
-              COOKIE_DOMAIN = "crans.${mainTld}";
+              COOKIE_DOMAIN = "${vhostName}.crans.${mainTld}";
+              # TODO: db pour mettre en commun les token.
+              # Transitoirement on les sépare
+              COOKIE_PREFIX = "anubis-${vhostName}";
               REDIRECT_DOMAINS = "${vhostName}.crans.${mainTld}";
               SOCKET_MODE = "0660";
               # Secret partagé entre les instances