security

2026-08-15 00:28:32 +02:00
parent 5f201cf725
commit 954384d1e4
14 changed files with 393 additions and 37 deletions
@@ -241,6 +241,8 @@ Files in `storage/` are untouched by updates and keep working.

 - The app binds to loopback; only the proxy is exposed.
 - Download/deletion require the unguessable key; everything else is `404`.
+- Optional per-file passwords are stored only as scrypt hashes; entry mints a
+  short-lived HMAC-signed cookie (server secret in `storage/.secret`).
 - Rate limiting protects the keyed endpoints; `TRUST_PROXY=1` must only be set
  when a proxy really sets `X-Forwarded-For`/`CF-Connecting-IP`.
 - Files never expire. Deletion requires possession of the key