From 7a8600ae9c5ac489596298f5b294a456fb1c5cef Mon Sep 17 00:00:00 2001 From: Tankred Hase Date: Fri, 10 Jun 2016 19:33:07 +0200 Subject: [PATCH] Cleanup HKPK docs --- README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 3ecaef8..a1e8683 100644 --- a/README.md +++ b/README.md @@ -219,9 +219,6 @@ npm start The `config/development.js` file can be used to configure a local development installation. For production use, the following environment variables need to be set: * NODE_ENV=production -* UPGRADE_HTTPS=true (upgrade HTTP to HTTPS and use [HSTS](https://developer.mozilla.org/en-US/docs/Web/Security/HTTP_strict_transport_security)) -* PUBLIC_KEY_PIN=base64_encoded_sha256 (use [HPKP](https://developer.mozilla.org/en-US/docs/Web/Security/Public_Key_Pinning)) -* PUBLIC_KEY_PIN_BACKUP=base64_encoded_sha256 * MONGO_URI=127.0.0.1:27017/test_db * MONGO_USER=db_user * MONGO_PASS=db_password @@ -234,6 +231,9 @@ The `config/development.js` file can be used to configure a local development in * SMTP_PASS=smtp_pass * SENDER_NAME="OpenPGP Key Server" * SENDER_EMAIL=noreply@example.com +* UPGRADE_HTTPS=true (upgrade HTTP requests to HTTPS and use [HSTS](https://developer.mozilla.org/en-US/docs/Web/Security/HTTP_strict_transport_security)) +* PUBLIC_KEY_PIN=base64_encoded_sha256 (optional, see [HPKP](https://developer.mozilla.org/en-US/docs/Web/Security/Public_Key_Pinning)) +* PUBLIC_KEY_PIN_BACKUP=base64_encoded_sha256 (optional, see [HPKP](https://developer.mozilla.org/en-US/docs/Web/Security/Public_Key_Pinning))