diff --git a/CHANGELOG b/CHANGELOG
index e7a4cecb..bc2089a9 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -10,6 +10,9 @@ Bug fixes:
 - Expose the incorrectDbCharset boolean in the NextCloud News server status
 - Give NextCloud News articles' guidHash attribute the correct type (string)
 
+Changes:
+- Overhaul input type normalization to minimize bug opportunities
+
 Version 0.1.1 (2017-09-30)
 ==========================
 
diff --git a/UPGRADING b/UPGRADING
new file mode 100644
index 00000000..5dd4f3b8
--- /dev/null
+++ b/UPGRADING
@@ -0,0 +1,20 @@
+General upgrade notes
+=====================
+
+When upgrading between any two versions of The Arsse, the following are usually prudent:
+
+- Back up your database
+- Check for any changes to sample Web server configuration
+- Check for any changes to sample systemd unit or other init files
+- If installing from source, update dependencies with `composer install -o --no-dev`
+
+Upgrading from 0.1.x to 0.2.0
+=============================
+
+- The database schema has changed from rev1 to rev2; if upgrading the database manually, apply the 1.sql file
+- Web server configuration has changed to accommodate Tiny Tiny RSS; the following URL paths are affected:
+ - /tt-rss/api/
+ - /tt-rss/feed-icons/
+ - /tt-rss/images/
+- The following Composer dependencies have been added:
+ - jkingweb/druuid
diff --git a/build.xml b/build.xml
index a2912bdb..e255e2e2 100644
--- a/build.xml
+++ b/build.xml
@@ -13,6 +13,8 @@
                 <include name="arsse.php"/>
                 <include name="CHANGELOG"/>
                 <include name="LICENSE"/>
+                <include name="AUTHORS"/>
+                <include name="UPGRADING"/>
                 <include name="README.md"/>
             </fileset>
         </copy>
diff --git a/dist/nginx.conf b/dist/nginx.conf
index 79005677..5e11859b 100644
--- a/dist/nginx.conf
+++ b/dist/nginx.conf
@@ -44,6 +44,7 @@ server {
 
     # Tiny Tiny RSS special-feed icons
     location /tt-rss/images/ {
+        auth_basic off;
         root /usr/share/arsse/www;
         try_files $uri =404;
     }