Cookie rejected because it has the attribute "SameSite=None" but not "Secure"

I have a dev website (dev.domain.com) and appwrite as a subdomain (api.dev.domain.com), but no cookies are saved in the browser when logging in using the web sdk.

The console logs Cookie "a_session_X" was rejected because it has the attribute "SameSite=None" but is missing the attribute "secure".
How do I get it to set the secure cookie?

I have _APP_OPTIONS_FORCE_HTTPS=false in the .env file as Nginx is used in front with its own SSL certificate.

Adding this line to Nginx solved the problem:
proxy_cookie_path / "/; SameSite=Strict; HTTPOnly; Secure"; (sets all proxied cookies to secure)