diff --git a/app/api/login/route.ts b/app/api/login/route.ts
index 522e6af..154b355 100644
--- a/app/api/login/route.ts
+++ b/app/api/login/route.ts
@@ -16,9 +16,10 @@ export async function POST(request: Request) {
 
     if (username === AUTH_USERNAME && password === AUTH_PASSWORD) {
       const response = NextResponse.json({ success: true });
+      const isHttps = request.headers.get('x-forwarded-proto') === 'https' || request.url.startsWith('https:');
       response.cookies.set(COOKIE_NAME, 'ok', {
         httpOnly: true,
-        secure: process.env.NODE_ENV === 'production',
+        secure: isHttps,
         sameSite: 'lax',
         maxAge: COOKIE_MAX_AGE,
         path: '/',