Transparent server-side encryption with stable master key

FixSecurityService
Shipped
23 Machi 2026, 22:35 UTC
Author
Kamo
Commit
be03417

- Add permanent notes.master-encryption-key to ConfigMap (was generating a random key on each pod restart, making old notes undecryptable) - Always encrypt content on create/update, always decrypt on read - Extract decryptDTO helper for consistent decryption across getNote, getAllNotes, and searchNotes - Notes encrypted with a lost key show null content (unrecoverable) but their data is preserved in DB for potential future recovery

All changes

Je, unaona nini kuhusu usafiri?

Kila moja ya hizi updates ardhi katika nafasi yako ya kazi moja kwa moja. Kuanza bure na kuangalia kukua wiki baada ya wiki.

Kuwa Huru MileleMtazamo wa bei