Add: create token signing key

1 files changed, 11 insertions, 1 deletions

diff --git a/install.mdwn b/install.mdwn
index 932fb84..65f9f27 100644
--- a/install.mdwn
+++ b/install.mdwn
@@ -53,7 +53,8 @@ You will need to generate some of the secrets:
 * a worker SSH key (shared between all workers)
 * at least one Qvisqve client secret hash and salt (ideally for each
   worker)
-* optionally, a self-signe TLS certificate, unless you use Let's
+* a JWT token signing key for Qvisqve
+* optionally, a self-signed TLS certificate, unless you use Let's
   Encrypt (instructions for generating that would be nice, please
   help)
 
@@ -103,6 +104,15 @@ that, giving it a different secret than for the workers. You will be
 using this secret to interact with ick yourself.
 
 
+## Generate a Qvisqve token signing key
+
+* `../qvisqve/generate-rsa-key token.key`
+
+This will generate files `token.key` (secret key) and `token.key.pub`
+(public key). Put their contents as values for the variables
+`qvisqve_token_private_key` (private) and `qvisqve_token_public_key`
+(public).
+
 # Run Ansible
 
 * Create a file called `hosts` with contents like the following: