diff --git a/compose.yaml b/compose.yaml
index 41bc63a..075114a 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -38,6 +38,7 @@ services:
       GITEA__service__DISABLE_REGISTRATION: ${GITEA_DISABLE_REGISTRATION:-false}
       GITEA__actions__ENABLED: ${GITEA_ACTIONS_ENABLED:-true}
       GITEA__security__INSTALL_LOCK: "true"
+      GITEA__session__PROVIDER: db
       GITEA__webhook__ALLOWED_HOST_LIST: control-plane
     ports:
       - "${GITEA_HTTP_BIND:-0.0.0.0}:${GITEA_HTTP_PORT:-3000}:3000"
diff --git a/docs/production-deployment.md b/docs/production-deployment.md
index 12975cc..92e25d6 100644
--- a/docs/production-deployment.md
+++ b/docs/production-deployment.md
@@ -18,6 +18,10 @@ GITEA_DISABLE_REGISTRATION=true
 GITEA_ACTIONS_ENABLED=false
 ```
 
+Keep `GITEA__session__PROVIDER=db` in the Compose service. Gitea otherwise
+defaults to in-memory sessions, which signs every user out whenever the
+container restarts.
+
 Start the services and install the Hop-native Gitea assets:
 
 ```sh