From e47ede6bf9303a75e28b6d609e4046bd2bb3eb5e Mon Sep 17 00:00:00 2001
From: Your Name <you@example.com>
Date: Mon, 13 Oct 2025 14:23:11 -0400
Subject: [PATCH] add detailed installation instructions

---
 README.md | 19 ++++++++++++++-----
 1 file changed, 14 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index 8200f5f..b8c0088 100755
--- a/README.md
+++ b/README.md
@@ -2,8 +2,17 @@
 Live demo: https://eternalwinter.xmpub.org/
 Needs php imagemagick & sqlite modules.
 ## Installation
-Make sure the directory is writable by the web server.
-Run `./password.sh <password>` to generate the moderation password's hash.
-Put a ttf font in the directory and name it `captchafont.ttf`
-Edit `config.php` to customize.
-To moderate, visit a url and add `?manage=<your password>` to the end of the url
+* `git clone https://git.xmpub.org/xmpub/EternalWinter`
+* `mkdir secrets`
+* Make sure the directory is writable by the web server. `chown -R www-data:www-data EternalWinter`
+* Run `./password.sh <password>` to generate the moderation password's hash.
+* Put a ttf font in the directory and name it `captchafont.ttf`
+* Edit `config.php` to customize.
+* To moderate, visit a url and add `?manage=<your password>` to the end of the url
+IMPORTANT: You need to add a line to your server configuration to block `/secrets/` since it contains sensitive data like the database and your password hash.
+* nginx:
+```
+location /secrets/ {
+	 return 404;
+}
+```
\ No newline at end of file