Generate SRS secret on first run and store it (#891)

This commit is contained in:
James 2018-03-10 06:41:20 -06:00 committed by Johan Smits
parent e6c32a03e5
commit ef79e9a65d
3 changed files with 25 additions and 4 deletions

View file

@ -508,8 +508,8 @@ Note: This postgrey setting needs `ENABLE_POSTGREY=1`
##### SRS_SECRET
- **empty** => generated when the image is built
- provide a secret to use in base64 **(recommended)**
- **empty** => generated when the container is started for the first time
- provide a secret to use in base64
- you may specify multiple keys, comma separated. the first one is used for signing and the remaining will be used for verification. this is how you rotate and expire keys
- if you have a cluster/swarm make sure the same keys are on all nodes
- example command to generate a key: `dd if=/dev/urandom bs=24 count=1 2>/dev/null | base64`