Explain application secrets (#217)

8 years ago · 82191b3383
parent 4bdb6a0eaf
commit 82191b3383
1 changed files with 2 additions and 0 deletions
--- a/.env.production.sample
+++ b/.env.production.sample
@ -14,6 +14,8 @@ LOCAL_DOMAIN=example.com
 LOCAL_HTTPS=true

 # Application secrets
+# These are arbitrary strings. They should be long and cryptographically secure.
+# For Docker, `docker-compose run --rm web rake secret` will generate them.
 PAPERCLIP_SECRET=
 SECRET_KEY_BASE=