From 4ce5860a1134a3af955afef247f0ca97c72983f6 Mon Sep 17 00:00:00 2001
From: Florian Greinacher <fgreinacher@users.noreply.github.com>
Date: Thu, 9 Apr 2020 12:51:50 +0200
Subject: [PATCH] =?UTF-8?q?docs(self-hosted):=20describe=20purpose=20and?=
 =?UTF-8?q?=20usage=20of=20privateKey=20opt=E2=80=A6=20(#5897)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 docs/usage/self-hosted-configuration.md | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/docs/usage/self-hosted-configuration.md b/docs/usage/self-hosted-configuration.md
index b1036d487c..bde2700322 100644
--- a/docs/usage/self-hosted-configuration.md
+++ b/docs/usage/self-hosted-configuration.md
@@ -119,6 +119,15 @@ This option is useful for troubleshooting, particularly if using presets. e.g. r
 
 ## privateKey
 
+This private key is used to decrypt config files.
+
+The corresponding public key can be used to create encrypted values for config files. If you want a simple UI to encrypt values you can put the public key in a HTML page similar to <https://renovatebot.com/encrypt>.
+
+To create the key pair with openssl use the following commands:
+
+- `openssl genrsa -out rsa_priv.pem 4096` for generating the private key
+- `openssl rsa -pubout -in rsa_priv.pem -out rsa_pub.pem` for extracting the public key
+
 ## productLinks
 
 Override this object if you wish to change the URLs that Renovate links to, e.g. if you have an internal forum for asking for help.
-- 
GitLab