diff --git a/server/configurations/local.yaml b/server/configurations/local.yaml
index 8774a2ae7b..5bac3408e7 100644
--- a/server/configurations/local.yaml
+++ b/server/configurations/local.yaml
@@ -195,18 +195,24 @@ s3:
 
 # Key used for encrypting customer emails before storing them in DB
 #
-# To make it easy to get started, some randomly generated values are provided
-# here. But if you're really going to be using museum, please generate new keys.
-# You can use `go run tools/gen-random-keys/main.go` for that.
+# [Note: Self hosting credentials]
+#
+# To make it easy to get started, some randomly generated (but fixed) values are
+# provided here. But if you're really going to be using museum, please generate
+# new keys. You can use `go run tools/gen-random-keys/main.go` for that.
+#
+# If you used the quickstart.sh script to prepare your compose.yaml, it would
+# have already generated new randomly generated values for you in your
+# compose.yaml, in the config section. Those will override these defaults; those
+# are the values for your instance would use, and what you need to backup.
 key:
     encryption: yvmG/RnzKrbCb9L3mgsmoxXr9H7i2Z4qlbT0mL3ln4w=
     hash: KXYiG07wC7GIgvCSdg+WmyWdXDAn6XKYJtp/wkEU7x573+byBRAYtpTP0wwvi8i/4l37uicX1dVTUzwH3sLZyw==
 
 # JWT secrets
 #
-# To make it easy to get started, a randomly generated values is provided here.
-# But if you're really going to be using museum, please generate new keys. You
-# can use `go run tools/gen-random-keys/main.go` for that.
+# See: [Note: Self hosting credentials] above.
+#
 jwt:
     secret: i2DecQmfGreG6q1vBj5tCokhlN41gcfS2cjOs9Po-u8=
 
diff --git a/server/quickstart/compose.yaml b/server/quickstart/compose.yaml
index 910d97bf9c..53e756d9e0 100644
--- a/server/quickstart/compose.yaml
+++ b/server/quickstart/compose.yaml
@@ -102,6 +102,13 @@ configs:
           user: pguser
           password: pgpass
 
+      key:
+          encryption: yvmG/RnzKrbCb9L3mgsmoxXr9H7i2Z4qlbT0mL3ln4w=
+          hash: KXYiG07wC7GIgvCSdg+WmyWdXDAn6XKYJtp/wkEU7x573+byBRAYtpTP0wwvi8i/4l37uicX1dVTUzwH3sLZyw==
+
+      jwt:
+          secret: i2DecQmfGreG6q1vBj5tCokhlN41gcfS2cjOs9Po-u8=
+
       s3:
           are_local_buckets: true
           b2-eu-cen: