Login blocked completely after new account created

Good afternoon everyone!

Starting a new thread specific to the issue. I’ve installed PenPot in a docker container using the following options in the yaml file:
enable-smtp enable-prepl-server enable-secure-session-cookies enable-auto-file-snapshot

  • PENPOT_SECRET_KEY: REDACTED
  • PEN_POT_AUTO_FILE_SNAPSHOT_EVERY: 5
  • PENPOT_AUTO_FILE_SNAPSHOT_TIIMEOUT: “1h”

As well as setting up an SMTP server. After running the server I go to the url, create a new account and i do indeed get the email for verification. When i click the verify link it takes me to the correct site with a message verification complete and is asking me to log in again.

This is where it breaks down and I can’t quite narrow it down. When i login with my credentials I am immediately presented with the something went wrong popup.

Checking the logs nothing looks crazy and everything seems to be up and running. I do see one error in the logs

penpot-frontend-1  | 2025/08/20 18:20:09 [error] 11#11: *64 open() "/var/www/app/plugins-runtime/index.js.map" failed (2: No such file or directory), client: MYHOMEIP, server: _, request: "GET /plugins-runtime/index.js.map HTTP/1.1", host: "SERVERIP"

And in the browser I see the following

Cookie “auth-token” has been rejected because a non-HTTPS cookie can’t be set as “secure”. 2 login-with-password
Source map error: request failed with status 404
Resource URL: http://SERVER/plugins-runtime/index.js?ts=1754046776119
Source Map URL: index.js.map

Checking in the frontend container i do indeed see the file, and verified its accessible. And when i click on it in the brower log it actually loads the file so not quite sure if this is even the issue.

But at this point am blocked from using it since we can’t seem to get people to log in. Not seeing anything in the config docs about setting access rights across the containers in any fashion so a little out in space as to what this one could be.

Thanks in advance!