mirror of
https://github.com/jhd3197/ServerKit.git
synced 2026-11-09 21:43:05 +09:00
Juan DenisandClaude Opus 4.8
007c4b984a
- backup_crypto.py: Fernet file encrypt/decrypt using the existing SERVERKIT_ENCRYPTION_KEY (no new deps) — encrypt_file (-> .enc), decrypt_file, is_encrypted_backup, encryption_available. - BackupService: an opt-in `encrypt_backups` config flag; _finalize_backup encrypts each artifact before _auto_upload (so the stored/remote copy is encrypted) and records encrypted/path/size; restore_application and restore_database transparently decrypt a .enc backup to a temp file first. - 9 tests: byte-exact roundtrip, wrong-key failure, availability reflects env, is_encrypted_backup, and an encrypted backup_files create+restore. Notes: in-memory (streaming large archives is a follow-up); key loss = unrecoverable backups (back the key up out of band). Additional remote targets (WebDAV/Azure/Dropbox/SFTP) and restore drills remain follow-ups. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>