Ghost blog hosted on Ghost droplet has bug in Ghost admin general settings to "Make this site private" button

Hi there,

Indeed this seems to be the case. As far as I can see this has already been reported to Ghost via a GitHub issue:

https://github.com/TryGhost/Ghost/issues/12173

I’ve tested the fix suggested by Antucg and it seems to be working:

• Edit the following file:

nano +48 /var/www/ghost/current/core/frontend/apps/private-blogging/lib/middleware.js

The code section should look like this:

return session({
  maxAge: constants.ONE_MONTH_MS,
  signed: false,
  sameSite: "none",
})(req, res, next);

Comment out the sameSite: "none" bit so that the code snippet looks like this:

return session({
  maxAge: constants.ONE_MONTH_MS,
  signed: false,
//  sameSite: "none",
})(req, res, next);

• Switch to the ghost-mgr user:

su ghost-mgr

And restart ghost:

ghost restart

After that, the login will work as normal.

For a permanent fix, I would recommend keeping an eye on the GitHub issue. Regards, Bobby