document machine auth api key

docs/ocis/deployment/_index.md

@@ -42,6 +42,9 @@ You can change it by setting the `OCIS_JWT_SECRET` environment variable for oCIS
 Another is used secret for singing JWT tokens for uploads and downloads, which also needs to be changed by the user.
 You can change it by setting the `STORAGE_TRANSFER_SECRET` environment variable for oCIS to a random string.
 
+One more secret is used for machine auth, so that external applications can authenticate with an API key.
+You can change it by setting the `OCIS_MACHINE_AUTH_API_KEY` environment variable for oCIS to a random string.
+
 ### Delete demo users
 
 {{< hint info >}}

docs/ocis/deployment/oc10_ocis_parallel.md

@@ -84,6 +84,8 @@ See also [example server setup]({{< ref "preparing_server" >}})
       OCIS_JWT_SECRET=
       # JWT secret which is used for uploads to create transfer tokens. Must be changed in order to have a secure oCIS. Defaults to "replace-me-with-a-transfer-secret"
       STORAGE_TRANSFER_SECRET=
+      # Machine auth api key secret. Must be changed in order to have a secure oCIS. Defaults to "change-me-please"
+      OCIS_MACHINE_AUTH_API_KEY=
 
       ### oCIS settings ###
       # oC10 version. Defaults to "latest"

docs/ocis/deployment/ocis_hello.md

@@ -75,6 +75,8 @@ See also [example server setup]({{< ref "preparing_server" >}})
       OCIS_JWT_SECRET=
       # JWT secret which is used for uploads to create transfer tokens. Must be changed in order to have a secure oCIS. Defaults to "replace-me-with-a-transfer-secret"
       STORAGE_TRANSFER_SECRET=
+      # Machine auth api key secret. Must be changed in order to have a secure oCIS. Defaults to "change-me-please"
+      OCIS_MACHINE_AUTH_API_KEY=
 
       ### oCIS Hello settings ###
       # oCIS Hello version. Defaults to "latest"

docs/ocis/deployment/ocis_keycloak.md

@@ -78,6 +78,8 @@ See also [example server setup]({{< ref "preparing_server" >}})
   OCIS_JWT_SECRET=
   # JWT secret which is used for uploads to create transfer tokens. Must be changed in order to have a secure oCIS. Defaults to "replace-me-with-a-transfer-secret"
   STORAGE_TRANSFER_SECRET=
+  # Machine auth api key secret. Must be changed in order to have a secure oCIS. Defaults to "change-me-please"
+  OCIS_MACHINE_AUTH_API_KEY=
 
   ### Keycloak ###
   # Domain of Keycloak, where you can find the management and authentication frontend. Defaults to "keycloak.owncloud.test"

docs/ocis/deployment/ocis_s3.md

@@ -77,6 +77,8 @@ See also [example server setup]({{< ref "preparing_server" >}})
       OCIS_JWT_SECRET=
       # JWT secret which is used for uploads to create transfer tokens. Must be changed in order to have a secure oCIS. Defaults to "replace-me-with-a-transfer-secret"
       STORAGE_TRANSFER_SECRET=
+      # Machine auth api key secret. Must be changed in order to have a secure oCIS. Defaults to "change-me-please"
+      OCIS_MACHINE_AUTH_API_KEY=
 
       ### MINIO / S3 settings ###
       # Domain of MinIO where the Web UI is accessible. Defaults to "minio.owncloud.test".

docs/ocis/deployment/ocis_traefik.md

@@ -72,6 +72,8 @@ See also [example server setup]({{< ref "preparing_server" >}})
   OCIS_JWT_SECRET=
   # JWT secret which is used for uploads to create transfer tokens. Must be changed in order to have a secure oCIS. Defaults to "replace-me-with-a-transfer-secret"
   STORAGE_TRANSFER_SECRET=
+  # Machine auth api key secret. Must be changed in order to have a secure oCIS. Defaults to "change-me-please"
+  OCIS_MACHINE_AUTH_API_KEY=
   ```
 
   You are installing oCIS on a server and Traefik will obtain valid certificates for you so please remove `INSECURE=true` or set it to `false`.

docs/ocis/deployment/ocis_wopi.md

@@ -80,6 +80,8 @@ See also [example server setup]({{< ref "preparing_server" >}})
     OCIS_JWT_SECRET=
     # JWT secret which is used for uploads to create transfer tokens. Must be changed in order to have a secure oCIS. Defaults to "replace-me-with-a-transfer-secret"
     STORAGE_TRANSFER_SECRET=
+    # Machine auth api key secret. Must be changed in order to have a secure oCIS. Defaults to "change-me-please"
+    OCIS_MACHINE_AUTH_API_KEY=
 
     ### Wopi server settings ###
     # oCIS Wopi server version. Defaults to "latest"