mirror of
https://github.com/johannesjo/super-productivity.git
synced 2026-07-21 10:28:33 +00:00
cb2e2e65a2
Complete Phase 1 (Preparation & Tooling) deliverables: Core Scripts (5): - setup-encrypted-volume.sh: Create LUKS2 encrypted volumes with dual-key setup - unlock-encrypted-volume.sh: Unlock volumes with audit logging - backup-encrypted.sh: Streaming encrypted backups (no temp files) - verify-prerequisites.sh: Environment validation (cryptsetup, AES-NI, kernel modules) - discover-docker-names.sh: Helper to identify actual container/volume names Configuration: - docker-compose.encrypted.yaml: Overlay config for encrypted PostgreSQL - encryption-at-rest.md: Architecture documentation (362 lines) Technical Details: - LUKS2 with AES-256-XTS (512-bit key for XTS mode) - Argon2id key derivation (1GB memory, 4 threads) - Dual-key setup: operational (daily use) + recovery (emergency) - LUKS header backup with encryption - OpenSSL AES-256-CBC for backup encryption (PBKDF2, 1M iterations) - Audit logging for GDPR compliance Also includes: Build workflow changes to temporarily disable SignPath code signing while waiting for certificate issuance. Total: 990 lines of encryption tooling and documentation. |
||
|---|---|---|
| .. | ||
| auto-publish-google-play-on-release.yml | ||
| build-android.yml | ||
| build-create-windows-store-on-release.yml | ||
| build-ios.yml | ||
| build-publish-to-aur-on-release.yml | ||
| build-publish-to-mac-store-on-release.yml | ||
| build-publish-to-snap-on-release.yml | ||
| build-update-web-app-on-release.yml | ||
| build.yml | ||
| ci.yml | ||
| claude.yml | ||
| codeql-analysis.yml | ||
| e2e-scheduled.yml | ||
| issue-open-auto-reply.yml | ||
| manual-build.yml | ||
| pr-preview-deploy.yml | ||
| publish-to-hub-docker.yml | ||
| review.yml | ||
| stale.yml | ||
| test-mac-dmg-build.yml | ||
| welcome-first-time-contributors.yml | ||
| wiki-sync.yml | ||