diff --git a/machines/core-services-01/monitoring.nix b/machines/core-services-01/monitoring.nix
index 47b7953..b0872cd 100644
--- a/machines/core-services-01/monitoring.nix
+++ b/machines/core-services-01/monitoring.nix
@@ -117,6 +117,10 @@ in
     keyFile = config.age.secrets.oauth2ProxyKeyFile.path;
     provider = "keycloak";
     email.domains = [ "*" ];
+    cookie = {
+      name = "_oauth2_proxy_ensrz";
+      domain = ".rz.ens.wtf";
+    };
     setXauthrequest = true;
     scope = "profile";
     loginURL = "https://auth.${my.subZone}/auth/realms/${realm}/protocol/openid-connect/auth";