chore: Use secure cookies in local development and fix layout nesting

apps/builder/app/env/env.server.ts

@@ -100,6 +100,9 @@ const env = {
 
   POSTGREST_URL: process.env.POSTGREST_URL ?? "http://localhost:3000",
   POSTGREST_API_KEY: process.env.POSTGREST_API_KEY ?? "",
+
+  SECURE_COOKIE:
+    process.env.SSL === "true" || process.env.NODE_ENV === "production",
 };
 
 export type ServerEnv = typeof env;

apps/builder/app/services/cookie.server.ts

@@ -1,12 +1,13 @@
 import { createCookie } from "@remix-run/node";
+import env from "~/env/env.server";
 import { dashboardPath } from "~/shared/router-utils";
 
 export const returnToCookie = createCookie("returnTo", {
   path: "/",
   httpOnly: true,
   sameSite: "lax",
   maxAge: 60, // 1 minute because it makes no sense to keep it for a long time
-  secure: process.env.NODE_ENV === "production",
+  secure: env.SECURE_COOKIE,
 });
 
 export const returnToPath = async (request: Request) => {

apps/builder/app/services/session.server.ts

@@ -10,7 +10,7 @@ export const sessionStorage = createCookieSessionStorage({
     path: "/", // remember to add this so the cookie will work in all routes
     httpOnly: true, // for security reasons, make this cookie http only
     secrets: env.AUTH_SECRET ? [env.AUTH_SECRET] : undefined, // replace this with an actual secret
-    secure: process.env.NODE_ENV === "production", // enable this in prod only
+    secure: env.SECURE_COOKIE,
   },
 });