From 3a9d9da74f55395ead20f3915ed04639e37b2f03 Mon Sep 17 00:00:00 2001 From: tv Date: Sat, 7 Nov 2026 22:35:09 +0100 Subject: access: bootstrap users only The first users come only from --bootstrap-users; the genesis node warns of htpasswd users that aren't among them. Auth plan M1. --- docs/example.toml | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) (limited to 'docs/example.toml') diff --git a/docs/example.toml b/docs/example.toml index e48bd2c..b98752d 100644 --- a/docs/example.toml +++ b/docs/example.toml @@ -83,13 +83,14 @@ htpasswd = "/etc/continuum/htpasswd" # (remake records, members, forget records), e.g. to repair a stuck remake, in a swarm # without a user registry. Such writes act on the whole swarm and are logged. Epoch # metadata and the swarm ID are never writable. With a registry its capabilities decide -# instead (docs/access.md). +# instead (docs/access.md), but for a registry nobody may manage users of any more: then +# these may do everything on this node, to set it right. # protocol-writers = ["alice"] # With genesis: give the new swarm a user registry (docs/access.md), these its first -# users, each may do everything, protocol data and managing users included; htpasswd's -# other users may read and write the swarm's data. Unset, the swarm has no registry: its -# users are all alike, and only those in protocol-writers write protocol data. +# users, each may do everything, protocol data and managing users included; other users +# may do nothing until added. Unset, the swarm has no registry: its users are all alike, +# and only those in protocol-writers write protocol data. # bootstrap-users = ["alice"] # How log lines look: text (timestamped), journal (for systemd's journal: no timestamp or -- cgit v1.3.1