additions to configuration notes

1 files changed, 14 insertions, 4 deletions

diff --git a/taskd.notes b/taskd.notes
index cd140e9d17b4..913e7a6d9ef6 100644
--- a/taskd.notes
+++ b/taskd.notes
@@ -1,5 +1,9 @@
-# Taskserver configuration reference can be found at
-# http://taskwarrior.org/docs/server_setup.html
+# This document gives some guidance on the initial configuration of a
+# Taskserver. For information on setting up organizations and users at the
+# server, and on how to configure the Task clients to sync, please see the
+# documentation at http://taskwarrior.org/docs/server_setup.html
+
+################################################################################
 
 # In order to control the server as a user, add the taskd group to your user.
 #
@@ -14,10 +18,14 @@
 export $(cat /etc/conf.d/taskd | sed -e '/^#/d' -e '/^\s*$/d')
 
 # Create the storage path
-sudo install -o taskd -g taskd -Dm775 -d /var/lib/taskd
+sudo install -o taskd -g taskd -Dm770 -d /var/lib/taskd
 
 # Initialize the database
 taskd init
+sudo chown taskd: $TASKDDATA/*  # this may be necessary to do again after adding
+                                # organizations or users
+sudo chmod 660 $TASKDDATA/config
+sudo chmod 770 $TASKDDATA/orgs
 
 # Initial configuration
 taskd config --force server $TASKDSERVER:$TASKDPORT
@@ -27,7 +35,9 @@ taskd config --force server $TASKDSERVER:$TASKDPORT
 cd /usr/lib/taskd/pki
 sudo ./generate
 sudo chown taskd: *.pem
-sudo mv *.pem $TASKDDATA
+sudo chmod g+rw server.*.pem    # <-- if not set, taskd will not read its cert
+sudo cp *.pem $TASKDDATA        # <-- these files need to be in /usr/lib/taskd/
+                                # because they are used to create client certs
 
 taskd config --force client.cert $TASKDDATA/client.cert.pem
 taskd config --force client.key $TASKDDATA/client.key.pem