diff --git a/docs/notary-mysql.md b/docs/notary-mysql.md new file mode 100644 index 0000000000..b5d6c7e8ec --- /dev/null +++ b/docs/notary-mysql.md @@ -0,0 +1,23 @@ + + +# Notary MySQL + +The Notary MySQL is one of the backends for [Notary Server](notary-server.md) and +[Notary Signer](notary-signer.md). + +### Recommendation +For security, especially in production deployments, one should create users +with restricted permissions and separate databases for the `server` and +`signer` since the `signer` only needs the `private_keys` table, and the +`server` only needs `timestamp_keys` and `tuf_files`. + +We use such a setup in our compose file to provide people with more accurate +guidance in deploying their own instances.