Update INSTALL.md

add security recommendations for production use
This commit is contained in:
Peter Rounce 2022-08-17 11:04:47 +01:00 committed by GitHub
parent 0b4b312ce1
commit 5b500ad569
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -83,6 +83,11 @@ this should respond with 'bad request' and show up in the service log
[create a bolt card](CARD.md) with the URI pointing to this server [create a bolt card](CARD.md) with the URI pointing to this server
use a PoS setup to read the bolt card, e.g. [Breez wallet](https://breez.technology/) use a PoS setup to read the bolt card, e.g. [Breez wallet](https://breez.technology/)
monitor the service log to ensure decryption, authentication, payment rules and lightning payment work as expected monitor the service log to ensure decryption, authentication, payment rules and lightning payment work as expected
#### production use
ensure that LOG_LEVEL is set to PRODUCTION
ensure that all secrets are minimally available
ensure that you have good operational security practices
monitor the system for unusual activity
# Further information and support # Further information and support