[DOP-25329] Add example of generating random secret keys

Author: dolfinus

syncmaster/server/settings/auth/jwt.py

@@ -23,7 +23,11 @@ class JWTSettings(BaseModel):
             """
             Secret key for signing JWT tokens.
 
-            Can be any string. It is recommended to generate random value for every application instance.
+            Can be any string. It is recommended to generate random value for every application instance, e.g.:
+
+            .. code:: shell
+
+                pwgen 32 1
             """,
         ),
     )

syncmaster/server/settings/server/session.py

@@ -2,6 +2,8 @@
 # SPDX-License-Identifier: Apache-2.0
 
 
+import textwrap
+
 from pydantic import BaseModel, ConfigDict, Field
 
 
@@ -38,8 +40,23 @@ class SessionSettings(BaseModel):
 
     """
 
-    secret_key: str = Field(description="A random string for signing cookies.")
-    session_cookie: str | None = Field(default="session", description="Name of the session cookie.")
+    secret_key: str = Field(
+        description=textwrap.dedent(
+            """
+            Secret key for encrypting cookies.
+
+            Can be any string. It is recommended to generate random value for every application instance, e.g.:
+
+            .. code:: shell
+
+                pwgen 32 1
+            """,
+        ),
+    )
+    session_cookie: str | None = Field(
+        default="session",
+        description="Name of the session cookie. Change this if there are multiple application under the same domain.",
+    )
     max_age: int | None = Field(
         default=14 * 24 * 60 * 60,
         description="Session expiry time in seconds. Defaults to 2 weeks.",