summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMatt Jankowski <matt@jankowski.online>2024-10-15 10:14:17 -0400
committerGitHub <noreply@github.com>2024-10-15 14:14:17 +0000
commit52bc33115d1dc0c544244aa008cb0f2c356531d1 (patch)
treecefa2969dec765338bd7d5328d57316553d8fd8a
parentb78597979a71d4ce4296a96fffc1fb466c7d3c6b (diff)
Add mention of encryption secrets to production sample (#32512)
-rw-r--r--.env.production.sample10
1 files changed, 10 insertions, 0 deletions
diff --git a/.env.production.sample b/.env.production.sample
index 0b458a1aa96..87ea031c4ce 100644
--- a/.env.production.sample
+++ b/.env.production.sample
@@ -45,6 +45,16 @@ ES_PASS=password
SECRET_KEY_BASE=
OTP_SECRET=
+# Encryption secrets
+# ------------------
+# Must be available (and set to same values) for all server processes
+# These are private/secret values, do not share outside hosting environment
+# Use `bin/rails db:encryption:init` to generate fresh secrets
+# ------------------
+# ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY=
+# ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT=
+# ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY=
+
# Web Push
# --------
# Generate with `bundle exec rails mastodon:webpush:generate_vapid_key`