super-productivity/packages/super-sync-server/docs
Johannes Millan e050eb99fa chore(sync-server): archive non-working encryption implementations
Both LUKS and TDE encryption don't work on OpenVZ:
- LUKS: requires dm-crypt kernel module (not available)
- TDE: technically not feasible during testing

Reverted TDE commit (1fdcc9a90) and moved all encryption scripts
to archive/encryption-attempts-openvz-incompatible/ for reference.

Decision: Operating without encryption-at-rest for now.

Future options documented in archive README:
- KVM migration (€2-5/month) enables LUKS
- Application-level encryption if staying on OpenVZ
- Managed PostgreSQL service (~€10-20/month)

Kept backup-encrypted.sh (encrypts backup files with passphrase,
separate from database encryption-at-rest).
2026-01-23 17:36:01 +01:00
..
authentication.md docs(auth): add authentication architecture documentation 2025-12-28 11:50:42 +01:00
encryption-at-rest.md feat(supersync): implement Phase 1 encryption-at-rest tooling 2026-01-23 14:31:24 +01:00
testing-guide.md feat(supersync): implement Phase 2 testing & validation tooling 2026-01-23 14:31:24 +01:00