aboutsummaryrefslogtreecommitdiffstats
path: root/docs/example.toml
diff options
context:
space:
mode:
authortv <tv@krebsco.de>2026-11-07 22:35:09 +0100
committertv <tv@krebsco.de>2026-11-07 22:35:09 +0100
commit3a9d9da74f55395ead20f3915ed04639e37b2f03 (patch)
tree1cb7d8cb8ff3acd8ce87b9169d535c9d36561fef /docs/example.toml
parent75ba06027496df9cea0054d8d8e9c504031d1b2c (diff)
access: bootstrap users only
The first users come only from --bootstrap-users; the genesis node warns of htpasswd users that aren't among them. Auth plan M1.
Diffstat (limited to 'docs/example.toml')
-rw-r--r--docs/example.toml9
1 files changed, 5 insertions, 4 deletions
diff --git a/docs/example.toml b/docs/example.toml
index e48bd2c..b98752d 100644
--- a/docs/example.toml
+++ b/docs/example.toml
@@ -83,13 +83,14 @@ htpasswd = "/etc/continuum/htpasswd"
# (remake records, members, forget records), e.g. to repair a stuck remake, in a swarm
# without a user registry. Such writes act on the whole swarm and are logged. Epoch
# metadata and the swarm ID are never writable. With a registry its capabilities decide
-# instead (docs/access.md).
+# instead (docs/access.md), but for a registry nobody may manage users of any more: then
+# these may do everything on this node, to set it right.
# protocol-writers = ["alice"]
# With genesis: give the new swarm a user registry (docs/access.md), these its first
-# users, each may do everything, protocol data and managing users included; htpasswd's
-# other users may read and write the swarm's data. Unset, the swarm has no registry: its
-# users are all alike, and only those in protocol-writers write protocol data.
+# users, each may do everything, protocol data and managing users included; other users
+# may do nothing until added. Unset, the swarm has no registry: its users are all alike,
+# and only those in protocol-writers write protocol data.
# bootstrap-users = ["alice"]
# How log lines look: text (timestamped), journal (for systemd's journal: no timestamp or