Feat: docs: secrets: tpc: on hashed passphrases (2)

diff --git a/docs/tpc.md b/docs/tpc.md
index 5266b83f8e452b1e25b1b7f5f054521ac1cfc64b..de3203a2a9de9098e808c1e563aff5949b52874f 100644 (file)
--- a/docs/tpc.md
+++ b/docs/tpc.md
@@ -78,6 +78,12 @@ generator like this:
 
 For `passwd(5)` and `shadow(5)` hashed passphrases, use something like this:
 
+    mkpasswd -m sha-512 | \
+      hydra $HYDRA eyaml $VOLNAME encrypt -q -o block --stdin -l some::random:password >> \
+      $CONFIG_FOLDER/puppet/config/secrets/node/$VOLNAME.$DOMAIN.yaml
+
+Or this, for a random passphrase:
+
     head -c ${1:-20} /dev/urandom | base64 | \
     mkpasswd -m sha-512 --stdin | \
       hydra $HYDRA eyaml $VOLNAME encrypt -q -o block --stdin -l some::random:password >> \