From cbde4037ff8326fc43d77d39e7b5bf2f44c1f796 Mon Sep 17 00:00:00 2001
From: Mitchell R <root@mitchellr.info>
Date: Sun, 10 May 2026 02:55:21 +0200
Subject: [PATCH] fix: add cookieName and totpIssuer to sec-config explicitly

BSB config doesn't apply schema defaults for missing keys.
Cookie was being set with name "undefined".
---
 sec-config.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/sec-config.yaml b/sec-config.yaml
index 598559a..2a0a9a9 100644
--- a/sec-config.yaml
+++ b/sec-config.yaml
@@ -42,6 +42,8 @@ default:
         argon2Memory: 65536          # KiB; tuned for Pi5 ~100ms
         argon2TimeCost: 3
         argon2Parallelism: 2
+        cookieName: betterframe_session
+        totpIssuer: BetterFrame
 
     # ----- Kiosk-facing REST API -----
     service-api-http: