From b43620aee4146fbf947c44c9280cad9eb50e9b41 Mon Sep 17 00:00:00 2001
From: Antoine Cotten <hello@acotten.com>
Date: Sat, 18 Mar 2023 01:13:40 +0100
Subject: [PATCH] doc(kibana): Encourage usage of encryption keys

Closes #827
---
 kibana/config/kibana.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/kibana/config/kibana.yml b/kibana/config/kibana.yml
index 45cd357..9d4e79a 100644
--- a/kibana/config/kibana.yml
+++ b/kibana/config/kibana.yml
@@ -14,6 +14,19 @@ monitoring.ui.container.logstash.enabled: true
 elasticsearch.username: kibana_system
 elasticsearch.password: ${KIBANA_SYSTEM_PASSWORD}
 
+## Encryption keys (optional but highly recommended)
+##
+## Generate with either
+##  $ docker container run --rm docker.elastic.co/kibana/kibana:8.6.2 bin/kibana-encryption-keys generate
+##  $ openssl rand -hex 32
+##
+## https://www.elastic.co/guide/en/kibana/current/using-kibana-with-security.html
+## https://www.elastic.co/guide/en/kibana/current/kibana-encryption-keys.html
+#
+#xpack.security.encryptionKey:
+#xpack.encryptedSavedObjects.encryptionKey:
+#xpack.reporting.encryptionKey:
+
 ## Fleet
 ## https://www.elastic.co/guide/en/kibana/current/fleet-settings-kb.html
 #