Suggest new installations don't expose the auth token.
David Blume

David Blume commited on 2016-09-09 17:00:18
Showing 1 changed files, with 1 additions and 1 deletions.

... ...
@@ -16,7 +16,7 @@ If you're me, and you want to contribute to the repo, then you can clone it like
16 16
 # Building it
17 17
 
18 18
 1. Enable Python pages at your web server. See [How to use Python in the web](https://docs.python.org/2/howto/webservers.html#). My configuration is for Apache, hence the .htaccess file.
19
-2. Move auth\_sample.txt to auth.txt, and replace "yourauthorizationhere" with a passcode you choose.
19
+2. Move auth\_sample.txt to auth.txt, and replace `yourauthorizationhere` with a passcode you choose. chmod 600 the file or deny access to it via .htaccess.
20 20
 3. Optional: Use secure HTTP. I recommend getting a free SSL certificate from [Let's Encrypt](https://letsencrypt.org/).
21 21
 4. If you don't have the YAML module, pip install pyyaml.
22 22
 
23 23