diff --git a/oc_lettings_site/settings.py b/oc_lettings_site/settings.py
index 628580b35..b0f8d4158 100644
--- a/oc_lettings_site/settings.py
+++ b/oc_lettings_site/settings.py
@@ -75,6 +75,16 @@
 
 ALLOWED_HOSTS = os.getenv("ALLOWED_HOSTS", "localhost,127.0.0.1").split(",")
 
+SESSION_COOKIE_SECURE = (
+    os.getenv("SESSION_COOKIE_SECURE", "False") == "True"
+)
+
+CSRF_COOKIE_SECURE = (
+    os.getenv("CSRF_COOKIE_SECURE", "False") == "True"
+)
+
+SECURE_REFERRER_POLICY = "same-origin"
+
 
 # Application definition