From cc2112a80525b85d4a910792dbed12ff678d48a7 Mon Sep 17 00:00:00 2001
From: Ryan Horiguchi <ryan.horiguchi@gmail.com>
Date: Mon, 3 Nov 2025 02:24:41 +0100
Subject: [PATCH] feat: add missing nix options `cookie_max_age` and
 `cookie_domain`

---
 nix/options.nix | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/nix/options.nix b/nix/options.nix
index d175597..80cc7b2 100644
--- a/nix/options.nix
+++ b/nix/options.nix
@@ -64,6 +64,25 @@ in {
                   '';
                 };
 
+                cookie_max_age = mkOption {
+                  type = types.int;
+                  default = 86400;
+                  description = "The maximum age of the session cookie in seconds.";
+                  example = "3600";
+                };
+
+                cookie_domain = mkOption {
+                  type = types.nullOr types.str;
+                  default = null;
+                  description = ''
+                    This is not required, but if you want to restrict the
+                    cookie to a specific domain, set it here. Otherwise leave
+                    it commented out. This may not work as expected if not
+                    using a reverse proxy.
+                  '';
+                  example = "headscale.example.com";
+                };
+
                 data_path = mkOption {
                   type = types.path;
                   default = "/var/lib/headplane";