diff --git a/charts/vaultwarden/Chart.yaml b/charts/vaultwarden/Chart.yaml index 1cebaced7..8baec3d5a 100644 --- a/charts/vaultwarden/Chart.yaml +++ b/charts/vaultwarden/Chart.yaml @@ -35,3 +35,5 @@ annotations: description: Comment out default ingress values - kind: changed description: Retain persistent volumes by default + - kind: changed + description: Link to Argon2 docs for `ADMIN_TOKEN` diff --git a/charts/vaultwarden/README.md b/charts/vaultwarden/README.md index 9d873aa33..0db0b0f2c 100644 --- a/charts/vaultwarden/README.md +++ b/charts/vaultwarden/README.md @@ -95,7 +95,7 @@ persistence: |-----|------|---------|-------------| | controller.strategy | string | `"RollingUpdate"` | Set the controller upgrade strategy | | env | object | See [values.yaml](./values.yaml) | environment variables. [[ref]](https://github.com/dani-garcia/vaultwarden/blob/main/.env.template) | -| env.ADMIN_TOKEN | string | `""` | Token for the admin interface, preferably use a long random string. One option is to use `openssl rand -base64 48`. If not set, the admin panel is disabled. | +| env.ADMIN_TOKEN | string | `""` | Token for the admin interface, preferably use a long random string. If not set, the admin panel is disabled. [[ref]](https://github.com/dani-garcia/vaultwarden/wiki/Enabling-admin-page#secure-the-admin_token) | | image.pullPolicy | string | `"IfNotPresent"` | image pull policy | | image.repository | string | `"ghcr.io/dani-garcia/vaultwarden"` | image repository | | image.tag | string | `"1.28.0-alpine"` | image tag | diff --git a/charts/vaultwarden/values.yaml b/charts/vaultwarden/values.yaml index 4237e90a5..ffc00e419 100644 --- a/charts/vaultwarden/values.yaml +++ b/charts/vaultwarden/values.yaml @@ -21,8 +21,8 @@ controller: # @default -- See [values.yaml](./values.yaml) env: # -- Token for the admin interface, preferably use a long random string. - # One option is to use `openssl rand -base64 48`. # If not set, the admin panel is disabled. + # [[ref]](https://github.com/dani-garcia/vaultwarden/wiki/Enabling-admin-page#secure-the-admin_token) ADMIN_TOKEN: "" service: