diff --git a/docs/provider-setup.md b/docs/provider-setup.md index 802a7ec..473da1e 100644 --- a/docs/provider-setup.md +++ b/docs/provider-setup.md @@ -53,7 +53,7 @@ location /cgi-bin/ { fastcgi_param SCRIPT_FILENAME /usr/lib$fastcgi_script_name; fastcgi_param PATH_INFO $fastcgi_path_info; - fastcgi_param CSAF_CONFIG /usr/lib/csaf/config.toml; + fastcgi_param CSAF_CONFIG /etc/csaf/config.toml; fastcgi_param SSL_CLIENT_VERIFY $ssl_client_verify; fastcgi_param SSL_CLIENT_S_DN $ssl_client_s_dn; @@ -103,9 +103,9 @@ Many systems use `www-data` as user id, so you could do something like ```sh -sudo touch /usr/lib/csaf/config.toml -sudo chgrp www-data /usr/lib/csaf/config.toml -sudo chmod g+r,o-rwx /usr/lib/csaf/config.toml +sudo touch /etc/csaf/config.toml +sudo chgrp www-data /etc/csaf/config.toml +sudo chmod g+r,o-rwx /etc/csaf/config.toml ``` @@ -118,6 +118,17 @@ which you need to customize for a production setup, see the [options of `csaf_provider`](https://github.com/csaf-poc/csaf_distribution/blob/main/docs/csaf_provider.md). + +```sh +# upload_signature = true +openpgp_private_key = "/etc/csaf/private.asc" +openpgp_public_key = "/etc/csaf/public.asc" +#tlps = ["green", "red"] +canonical_url_prefix = "https://localhost:8443" +categories = ["Example Company Product A", "expr:document.lang"] +create_service_document = true +#no_passphrase = true +```