summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--install.mdwn12
1 files changed, 11 insertions, 1 deletions
diff --git a/install.mdwn b/install.mdwn
index 932fb84..65f9f27 100644
--- a/install.mdwn
+++ b/install.mdwn
@@ -53,7 +53,8 @@ You will need to generate some of the secrets:
* a worker SSH key (shared between all workers)
* at least one Qvisqve client secret hash and salt (ideally for each
worker)
-* optionally, a self-signe TLS certificate, unless you use Let's
+* a JWT token signing key for Qvisqve
+* optionally, a self-signed TLS certificate, unless you use Let's
Encrypt (instructions for generating that would be nice, please
help)
@@ -103,6 +104,15 @@ that, giving it a different secret than for the workers. You will be
using this secret to interact with ick yourself.
+## Generate a Qvisqve token signing key
+
+* `../qvisqve/generate-rsa-key token.key`
+
+This will generate files `token.key` (secret key) and `token.key.pub`
+(public key). Put their contents as values for the variables
+`qvisqve_token_private_key` (private) and `qvisqve_token_public_key`
+(public).
+
# Run Ansible
* Create a file called `hosts` with contents like the following: