mix/selfpost
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity

docs: plan backup encryption and drop session-restore risk

Browse Source 
Update code-review with phase 1.5 (optional .spbk/.spde encryption, checkbox UI). Remove session resurrection from backup as an accepted risk in security.md.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Микс
2026-08-05 22:07:02 +03:00
parent 522425a4da
commit 2595b0b673
3 changed files with 36 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGELOG.md
+10 -2
View File
@@ -7,6 +7,9 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); version
### Added
- docs: `docs/code-review.md` — phase 1.5 plan for optional password encryption
of full backup (`.spbk`) and domain export (`.spde`); checkbox UI pattern;
remove session-resurrection-from-backup as accepted risk.
- docs: `docs/code-review.md` — full codebase review (architecture, code quality,
documentation, GUI, legacy, risks) with prioritized implementation plan and
model routing; cross-links in `implementation-plan.md` and `progress.md`.
@@ -39,6 +42,11 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); version
internal-variable list; `TRUSTED_PROXY_CIDR` wired through
`deploy/docker-compose.yml`.
### Removed
- docs: `security.md` — accepted risk «restore old backup revives session rows»
(not a concern in operator deployment).
### Changed
- docs: `implementation-plan.md` trimmed to the sole open v1.x gate — pre-release
@@ -47,8 +55,8 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); version
`mail.log` rotation (rename + `postfix reload`), `SELFPOST_HOSTNAME` startup
gate, log-tailer known gaps.
- docs: `development.md` — expanded e2e stack and `release.yml` matrix workflow.
- docs: `security.md` — accepted risks for session rows restored from backup and
send-log rows stuck at `queued` after panel restart or container recreate.
- docs: `security.md` — accepted risk for send-log rows stuck at `queued` after
panel restart or container recreate.
- docs: `roadmap.md` — optional send-log / `mail.log` follow-ups under v1.x tail.
- docs: `progress.md`, `documentation-plan.md` — cross-links updated for the new layout.
- docs: `documentation-plan.md` marked closed (D1–D9); trimmed to package