From: Andrea Faulds <ajf@ajf.me>
Date: Wed, 23 Nov 2016 08:30:53 +0000 (+0000)
Subject: Explain application secrets (#217)
X-Git-Url: https://git.xn--scling-oua.cat.family/?a=commitdiff_plain;h=82191b33831f26e071a27dd59ce2e46fb467589c;p=mastodon.git

Explain application secrets (#217)
---

diff --git a/.env.production.sample b/.env.production.sample
index b68ba523c..a3da10b97 100644
--- a/.env.production.sample
+++ b/.env.production.sample
@@ -14,6 +14,8 @@ LOCAL_DOMAIN=example.com
 LOCAL_HTTPS=true
 
 # Application secrets
+# These are arbitrary strings. They should be long and cryptographically secure.
+# For Docker, `docker-compose run --rm web rake secret` will generate them.
 PAPERCLIP_SECRET=
 SECRET_KEY_BASE=