diff --git a/workloads/grafana/grafana-proxy.yml b/workloads/grafana/grafana-proxy.yml
index 0717fc6..01af54c 100644
--- a/workloads/grafana/grafana-proxy.yml
+++ b/workloads/grafana/grafana-proxy.yml
@@ -47,6 +47,12 @@ spec:
           value: https://cloud.shoup.io/index.php/apps/oauth2/api/v1/token
         - name: OAUTH2_PROXY_VALIDATE_URL
           value: https://cloud.shoup.io/ocs/v2.php/cloud/user?format=json
+        - name: OAUTH2_PROXY_COOKIE_DOMAIN
+          value: .shoup.io
+        - name: OAUTH2_PROXY_COOKIE_SECURE
+          value: "true"
+        - name: "OAUTH2_PROXY_COOKIE_NAME"
+          value: "_oauth2_proxy_grafana"
         livenessProbe:
           tcpSocket:
             port: 4180