feat: init

Documentation/docs/onprem/configuration/security.md

@@ -0,0 +1,60 @@
+---
+description: You should update this security keys to ship Twake in production.
+---
+
+# 🔒 Security
+
+> See how to [Detach Configuration](./) first.
+
+The following keys must be updated to increase Twake security in [docker-compose.yml location]/configuration/backend-node/production.json:
+
+```json
+{
+  "phpnode": {
+    "secret": "xxx" // Secret for PHP<->Node communication, deprecated like PHP
+  },
+  "websocket": {
+    "auth": {
+      "jwt": {
+        "secret": "xxx" // JWT secret for websockets
+      }
+    }
+  },
+  "auth": {
+    "jwt": {
+      "secret": "xxx" // JWT secret
+    }
+  },
+  "database": {
+    "secret": "xxx" // Db app layer encryption key
+  },
+  "storage": {
+    "secret": "xxx", // Storage app layer encryption key
+    "iv": "xxx" // Storage app layer encryption iv
+  }
+}
+```
+
+The following keys must be updated to increase Twake security in /configuration/backend/Parameters.php:
+
+```text
+"env" => [
+  "secret" => "somesecret", //Any string
+],
+...
+"websocket" => [
+  ...
+  "pusher_public" //Generate public and private key
+  "pusher_private" //Put private key here
+],
+"db" => [
+  ...
+  "encryption_key" //Any string
+]
+...
+"storage" => [
+  ...
+  "drive_salt" => "SecretPassword", //Any string
+],
+...
+```