alexpolo1
8d2db6281c
feat: send daily repository status to Discord
2026-08-18 10:07:59 +02:00
alexpolo1
edb73df2d6
docs: archive legacy guides and add Obsidian vault
2026-08-17 09:12:03 +02:00
alexpolo1
ddc52ddc91
fix: cap quote PDFs and add compact recovery
2026-08-13 13:02:16 +02:00
alexpolo1
01ad8f4a49
feat: consolidate ordrestyring quote workflow
2026-07-05 08:10:59 +00:00
alexpolo1
002e05bfc7
fix(ordrestyring): close hours-without-case gap and harden local-first sync
2026-04-08 05:56:01 +00:00
alexpolo1
d081763d20
fix: stabilize ordrestyring sync parsing and simulation hours
2026-04-06 07:44:09 +00:00
alexpolo1
4695e28088
feat: add ordrestyring simulation runner
2026-04-05 20:05:07 +00:00
alexpolo1
b096ff55c3
fix: add automatic port cleanup before server start to prevent EADDRINUSE errors
2026-01-21 07:56:56 +00:00
alexpolo1
3e6f3f58a9
feat: Implement root-only encrypted environment system
...
Add comprehensive encrypted environment variable system with AES-256 encryption.
Security Features:
- AES-256-CBC encryption with PBKDF2 (100k iterations)
- Root-only encryption key (/root/.tilbudgivern-secure/)
- Encrypted .env.enc files safe to commit to git
- Plaintext .env files only exist at runtime
- Auto-cleanup on shutdown
Components:
- setup-encrypted-env.sh: Encrypt .env → .env.enc
- decrypt-env.sh: Decrypt .env.enc → .env
- start-secure.sh: Decrypt + start application
- test-encryption.sh: Test encryption/decryption
- tilbudgivern-secure.service: Systemd service
Documentation:
- ENCRYPTED_ENV_README.md: Overview and quick start
- ENCRYPTED_ENV_QUICKSTART.md: Quick reference guide
- docs/ENCRYPTED_ENV_SECURITY.md: Complete security guide
Threat Model:
✅ User account compromise: Credentials safe
✅ Git repository leak: Only encrypted files exposed
✅ File system read: Encrypted files useless
❌ Root compromise: Defense in depth
This ensures attackers need root access to decrypt credentials.
2025-12-20 13:36:30 +00:00
alexpolo1
9d1b1917a7
Add comprehensive database backup setup and scripts
...
- Created DATABASE_BACKUP_SETUP.md for detailed backup instructions
- Implemented backup-databases.sh for automated database backups
- Added logrotate configuration for managing backup logs
- Developed setup scripts for user-specific backup configurations
- Included error handling and logging in backup processes
- Established cron job setup for automated backups
- Provided examples and troubleshooting tips in documentation
2025-11-16 21:12:29 +00:00
