diff --git a/config/initializers/session_store.rb b/config/initializers/session_store.rb
index 2bbb72e68..57e700e39 100644
--- a/config/initializers/session_store.rb
+++ b/config/initializers/session_store.rb
@@ -7,5 +7,5 @@ Rails.application.config.session_store(
   domain: :all,
   tld_length: 2,
   same_site: :lax,
-  secure: Rails.env.production?
+  secure: Rails.env.production? && Danbooru.config.canonical_url.match?(%r!\Ahttps://!)
 )