diff --git a/roles/pagure/templates/pagure.cfg b/roles/pagure/templates/pagure.cfg
index 8fc0cc5505..2d3af707f3 100644
--- a/roles/pagure/templates/pagure.cfg
+++ b/roles/pagure/templates/pagure.cfg
@@ -117,7 +117,7 @@ PAGURE_AUTH = 'fas'
 # This may be set to False when testing your application but should always
 # be set to True in production.
 # Default: ``True``.
-SESSION_COOKIE_SECURE = False
+SESSION_COOKIE_SECURE = True
 
 # The name of the cookie used to store the session id.
 # Default: ``.pagure``.