15606: Add error message and doc link to XSS protection error.

[arvados.git] / doc / install / install-keep-web.html.textile.liquid

diff --git a/doc/install/install-keep-web.html.textile.liquid b/doc/install/install-keep-web.html.textile.liquid
index 71b80739ce09949336777df7981b63b1dd6e4cd1..a8833f44da20b8492227b46c7470a0cf5a26bfa2 100644 (file)
--- a/doc/install/install-keep-web.html.textile.liquid
+++ b/doc/install/install-keep-web.html.textile.liquid
@@ -100,7 +100,7 @@ server {
 If you restrict access to your Arvados services based on network topology -- for example, your proxy server is not reachable from the public internet -- additional proxy configuration might be needed to thwart cross-site scripting attacks that would circumvent your restrictions. Read the "'Intranet mode' section of the Keep-web documentation":https://godoc.org/github.com/curoverse/arvados/services/keep-web#hdr-Intranet_mode now.
 {% include 'notebox_end' %}
 
-h3. Configure DNS
+h3(#dns). Configure DNS
 
 Configure your DNS servers so the following names resolve to your Nginx proxy's public IP address.
 * @download.uuid_prefix.your.domain@
@@ -123,7 +123,6 @@ Set the cluster config file like the following:
 <notextile>
 <pre><code>Clusters:
   <span class="userinput">uuid_prefix</span>:
-    SystemRootToken: "{{railsout}}"
     Services:
       Controller:
         ExternalURL: "https://<span class="userinput">uuid_prefix</span>.your.domain"
@@ -136,7 +135,7 @@ Set the cluster config file like the following:
           "http://keep_web_hostname_goes_here:9002/": {}
         ExternalURL: "https://download.<span class="userinput">uuid_prefix</span>.your.domain"
     Users:
-      AnonymousUserToken: "xxxxxxxxxxxxxxxxxxxx"
+      AnonymousUserToken: "{{railsout}}"
     Collections:
       TrustAllContent: false
     TLS:
@@ -203,10 +202,7 @@ Install runit to supervise the Keep-web daemon.  {% include 'install_runit' %}
 The basic command to start Keep-web in the service run script is:
 
 <notextile>
-<pre><code>exec sudo -u nobody keep-web
+<pre><code>exec keep-web
 </code></pre>
 </notextile>
 
-{% include 'notebox_begin' %}
-Please take into consideration that the config file should be world-readable.
-{% include 'notebox_end' %}