VeillaxandClaude Sonnet 5.5 9f2fe4a416 Encrypt pages at rest with a key per person ...

Pages are sealed with AES-256-GCM. Each person's key is derived (HKDF) from a master key in the settings file plus their Authentik issuer and subject. Plain files from earlier versions are read and re-saved encrypted. Mako refuses to open a notebook it cannot decrypt rather than overwrite it.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-11-01 00:25:37 -06:00

..

build.sh

Rename Nurse to Mako

2026-11-01 00:07:43 -06:00

docker-compose.yml

Encrypt pages at rest with a key per person

2026-11-01 00:25:37 -06:00

install.sh

Encrypt pages at rest with a key per person

2026-11-01 00:25:37 -06:00

publish-release.sh

Rename Nurse to Mako

2026-11-01 00:07:43 -06:00