diff --git a/.env.example b/.env.example
index 50d8ae8..6a06d3c 100644
--- a/.env.example
+++ b/.env.example
@@ -5,6 +5,9 @@ TZ=ETC/UTC
 # These fields are not required for OIDC authentication
 GODOXY_API_USER=admin
 GODOXY_API_PASSWORD=password
+
+# Enable `secure` cookie flag
+GODOXY_API_JWT_SECURE=true
 # generate secret with `openssl rand -base64 32`
 GODOXY_API_JWT_SECRET=
 # the JWT token time-to-live