Home
/
/

Coder offers two browser security features that you can choose to enable. These are available under Manage > Admin > Infrastructure.

HTTP Strict Transport Security

If you are serving Coder over HTTPS, we recommend enabling the Strict-Transport-Security Header option, which adds the HTTP Strict Transport Security header to responses. This browser feature requires future requests to occur over HTTPS.

Toggle HTTP Strict Transport Security Header

The Secure Cookie option controls the secure property of cookies that Coder issues. This prevents browsers from sending sensitive cookies, such as those containing credentials, over unencrypted (HTTP) connections. We recommend enabling this setting if you are serving Coder over HTTPS.

Toggle Secure Cookie

SSH

You can choose the SSH keygen algorithm Coder uses when generating SSH keys for users.

Coder allows you to choose between Ed25519, ECDSA, and RSA (4096 bits).

Choose SSH keygen algorithm

See an opportunity to improve our docs? Make an edit.
On this page