services.grafana.settings.security.cookie_samesite
NixOS option
Sets the SameSite cookie attribute and prevents the browser from sending this cookie along with cross-site requests. The main goal is to mitigate the risk of cross-origin information leakage. This setting also provides some protection against cross-site request forgery attacks (CSRF), read more about SameSite here. Using value disabled does not add any SameSite attribute to cookies.
type: one of "lax", "strict", "none", "disabled"Default
declared in: nixos/modules/services/monitoring/grafana.nixView source on NixOS/nixpkgs →"lax"