Mirrors/super-productivity
1
0
Fork 0
mirror of https://github.com/johannesjo/super-productivity.git synced 2026-07-21 02:20:12 +00:00
Code Issues Projects Releases Wiki Activity
super-productivity/.github
History
Johannes Millan cb2e2e65a2 feat(supersync): implement Phase 1 encryption-at-rest tooling 
Complete Phase 1 (Preparation & Tooling) deliverables:

Core Scripts (5):
- setup-encrypted-volume.sh: Create LUKS2 encrypted volumes with dual-key setup
- unlock-encrypted-volume.sh: Unlock volumes with audit logging
- backup-encrypted.sh: Streaming encrypted backups (no temp files)
- verify-prerequisites.sh: Environment validation (cryptsetup, AES-NI, kernel modules)
- discover-docker-names.sh: Helper to identify actual container/volume names

Configuration:
- docker-compose.encrypted.yaml: Overlay config for encrypted PostgreSQL
- encryption-at-rest.md: Architecture documentation (362 lines)

Technical Details:
- LUKS2 with AES-256-XTS (512-bit key for XTS mode)
- Argon2id key derivation (1GB memory, 4 threads)
- Dual-key setup: operational (daily use) + recovery (emergency)
- LUKS header backup with encryption
- OpenSSL AES-256-CBC for backup encryption (PBKDF2, 1M iterations)
- Audit logging for GDPR compliance

Also includes: Build workflow changes to temporarily disable SignPath
code signing while waiting for certificate issuance.

Total: 990 lines of encryption tooling and documentation.
2026-01-23 14:31:24 +01:00
..
annotations docs(wiki): initial revision (v0.1) 2026-01-20 03:04:08 -08:00
ISSUE_TEMPLATE fix(issue-templates): correct type casing from 'Future' to 'Feature' in feature request template 2026-01-22 19:42:05 +07:00
workflows feat(supersync): implement Phase 1 encryption-at-rest tooling 2026-01-23 14:31:24 +01:00
CODE_OF_CONDUCT.md docs: add code of conduct 2021-09-20 13:04:44 +02:00
CODEOWNERS security: add CODEOWNERS, enhance Dependabot, document manual setup 2026-01-21 14:30:24 +01:00
CONTRIBUTING.md docs: add contributing 2019-09-10 13:20:07 +02:00
dependabot.yml security: add CODEOWNERS, enhance Dependabot, document manual setup 2026-01-21 14:30:24 +01:00
FUNDING.yml Create FUNDING.yml 2020-05-05 12:34:24 +02:00
PULL_REQUEST_TEMPLATE.md docs: add pull request template. 2026-01-17 15:47:22 +07:00
SECURITY-SETUP.md security: add CODEOWNERS, enhance Dependabot, document manual setup 2026-01-21 14:30:24 +01:00