docs: add subdomain configuration in csrf page (#1896)

Add some instructions as to how kratos can be configured to work across subdomains.
ory · Oct 29, 2021 · 681750f · 681750f
1 parent 1e794fe
commit 681750f
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/docs/docs/debug/csrf.mdx b/docs/docs/debug/csrf.mdx
@@ -86,6 +86,9 @@ do in the Quickstart guide.
 We do not recommend running them on separate subdomains, e.g.
 `https://kratos.my-website/` and `https://secureapp.my-website/`).
 
+To allow cookies to work across subdomains, make sure to set the domain name
+in the Kratos config file under [`session.cookie.domain`](https://www.ory.sh/kratos/docs/next/guides/configuring-cookies/#session-cookies).
+
 Running the apps on different TLDs will not work at all, e.g. e.g.
 `https://kratos-my-website/` and `https://secureapp-my-website/`.