Add a note about https configuration.

Check issue #125

Signed-off-by: Jerome Jutteau <j.jutteau@gmail.com>

diff --git a/README.md b/README.md
index 4bc103019fe6c3f2e4acab769cea92fa068dab0e..d9ac583649a46980270172e52b995ee3a8ae300d 100644 (file)
--- a/README.md
+++ b/README.md
@@ -140,7 +140,7 @@ location ~ /var-.* {
 ```
 
 You should also remove un-necessessary write access once the installation is done (ex: configuration file).
 ```
 
 You should also remove un-necessessary write access once the installation is done (ex: configuration file).

-An other obvious basic security is to let access users to the site by HTTPS.
+An other obvious basic security is to let access users to the site by HTTPS (make sure `web_root` in you `config.local.php` is set with https).

 
 ## Server side encryption
 
 
 ## Server side encryption