bug was due to having explicit 'serve --http=address' when running
behind nginx on NixOS server
So either a more complicated check was required, or just setting
Secure=true unconditionally.
This seems to be a better way, because Firefox already allows secure
cookies beng sent and received from localhost for dev purposes, and
Chromium does too
nix build
will put binary into nix store, and symlink to ./result
running with
./result/bin/auth-pocketbase-attempt serve --dir=./pb_data
if i understood migrations correctly, when using as a framework
migrations will be generated as go files, and will be packaged into the binary