Alex/kaido-core
SHA256
Watch
1
0
Fork
You've already forked kaido-core
 0
Code Issues 11 Pull requests 1 Releases Activity Actions

Passphrase-encrypted configuration backups #90

New issue
Open
opened 2026-11-08 13:59:58 +01:00 by Alex · 0 comments
Alex commented 2026-11-08 13:59:58 +01:00
Owner

Problem

  • The backup archive contains config.db with its full history, including earlier secrets (ADR 0015).
  • The archive is not encrypted and leaves the file permission protection of the router.

Proposed change

  • Optionally encrypt the backup with a passphrase, like pfSense.
  • Restore asks for the passphrase.

Context

  • Follow-up to #89, see ADR 0021. Not urgent, planned for later.
## Problem - The backup archive contains config.db with its full history, including earlier secrets (ADR 0015). - The archive is not encrypted and leaves the file permission protection of the router. ## Proposed change - Optionally encrypt the backup with a passphrase, like pfSense. - Restore asks for the passphrase. ## Context - Follow-up to #89, see ADR 0021. Not urgent, planned for later.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
134-reply-to-before-routing
119-example-firstboot
No results found.
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
Alex/kaido-core#90
No description provided.