Add cache info for security.txt config

diff --git a/config/default.yaml b/config/default.yaml
index 0b0a54eef3f78af9feea2db6f51409c7973f1fd2..3a0b494fbd45c6e28aa6ec0f18290d94fe34518a 100644 (file)
--- a/config/default.yaml
+++ b/config/default.yaml
@@ -638,7 +638,8 @@ instance:
   robots: |
     User-agent: *
     Disallow:
-  # Security.txt rules. To discourage researchers from testing your instance and disable security.txt integration, set this to an empty string
+  # /.well-known/security.txt rules. This endpoint is cached, so you may have to wait a few hours before viewing your changes
+  # To discourage researchers from testing your instance and disable security.txt integration, set this to an empty string
   securitytxt:
     '# If you would like to report a security issue\n# you may report it to:\nContact: https://github.com/Chocobozzz/PeerTube/blob/develop/SECURITY.md\nContact: mailto:'
 

diff --git a/config/production.yaml.example b/config/production.yaml.example
index 209aaa56ac1a6c3b8fe5a14e31bb490643f2ed39..dafc15915e4a65b2f90c7fa49c7692d3ec2e702e 100644 (file)
--- a/config/production.yaml.example
+++ b/config/production.yaml.example
@@ -648,7 +648,8 @@ instance:
   robots: |
     User-agent: *
     Disallow:
-  # Security.txt rules. To discourage researchers from testing your instance and disable security.txt integration, set this to an empty string
+  # /.well-known/security.txt rules. This endpoint is cached, so you may have to wait a few hours before viewing your changes
+  # To discourage researchers from testing your instance and disable security.txt integration, set this to an empty string
   securitytxt:
     '# If you would like to report a security issue\n# you may report it to:\nContact: https://github.com/Chocobozzz/PeerTube/blob/develop/SECURITY.md\nContact: mailto:'