diff --git a/.env.sample b/.env.sample
index 8893da8..79baf12 100644
--- a/.env.sample
+++ b/.env.sample
@@ -4,4 +4,7 @@ DB_USERNAME="" # Postgress Database Username
 DB_PASSWORD="" # Postgres Database Password
 DB_HOST="" # Postgres Host (IP address or hostname of the database)
 DB_PORT="" # Postgres Port number (Default: 5432)
-DB_DATABASE_NAME="" # Name of the database 
\ No newline at end of file
+DB_DATABASE_NAME="" # Name of the database 
+
+# Additional configuration
+SECURE_COOKIE=false # Set to true to enable secure cookies
\ No newline at end of file
diff --git a/README.md b/README.md
index f86a233..534b102 100644
--- a/README.md
+++ b/README.md
@@ -41,6 +41,7 @@ IMMICH_URL = "http://local-ip-of-immich:port" # Your immich instace ip address a
 EXTERNAL_IMMICH_URL = "https://external-address" # External address of immich
 ```
 Refer here for obtaining Immich API Key: https://immich.app/docs/features/command-line-interface#obtain-the-api-key
+
 #### Method 2 - Portainer
 
 If you're using portainer, run the docker using `docker run` and add the power tools to the same network as immich.
diff --git a/src/config/environment.ts b/src/config/environment.ts
index 3062eda..7a5945d 100644
--- a/src/config/environment.ts
+++ b/src/config/environment.ts
@@ -4,6 +4,7 @@ export const ENV = {
   IMMICH_API_KEY: process.env.IMMICH_API_KEY as string,
   DATABASE_URL: (process.env.DATABASE_URL || `postgresql://${process.env.DB_USERNAME}:${process.env.DB_PASSWORD}@${(process.env.DB_HOST || 'immich_postgres')}:${(process.env.DB_PORT || '5432')}/${process.env.DB_DATABASE_NAME}`),
   JWT_SECRET: process.env.JWT_SECRET as string,
+  SECURE_COOKIE: process.env.SECURE_COOKIE === 'true',
 };
 
 
diff --git a/src/lib/cookie.ts b/src/lib/cookie.ts
index 2174af5..8d662ba 100644
--- a/src/lib/cookie.ts
+++ b/src/lib/cookie.ts
@@ -1,3 +1,4 @@
+import { ENV } from '@/config/environment'
 import type { CookieSerializeOptions } from 'cookie'
 import cookie from 'cookie'
 import type { IncomingMessage } from 'http'
@@ -22,8 +23,7 @@ export const serializeCookie = (
   return cookie.serialize(name, String(value), {
     httpOnly: true,
     maxAge: 60 * 60 * 24 * 7,
-    sameSite: process.env.NODE_ENV === 'production' ? 'none' : 'lax',
-    secure: process.env.NODE_ENV === 'production',
+    secure: ENV.SECURE_COOKIE,
     path: '/',
     ...options,
   })