services.gitea.settings.session.COOKIE_SECURE

Marks session cookies as "secure" as a hint for browsers to only send them via HTTPS. This option is recommend, if gitea is being served over HTTPS.