linux_patch_manager

git-echo/linux_patch_manager

Private

Public Access

Fork 0

Files

History

Draco-Lunaris-Echo b9fb3427e0

CI Pipeline / Rust Format Check (push) Successful in 8s

CI Pipeline / Clippy Lints (push) Successful in 50s

CI Pipeline / Rust Unit Tests (push) Successful in 1m8s

CI Pipeline / Security Audit (push) Successful in 5s

CI Pipeline / Frontend Lint & Type Check (push) Successful in 15s

CI Pipeline / Build .deb & Release (push) Has been skipped

fix(security): encrypt app secrets at rest with AES-256-GCM (#6 )

Encrypt three sensitive secrets that were stored in plaintext: OIDC client_secret, SMTP smtp_password, TOTP totp_secret. AES-256-GCM via pm-core::crypto helper. New per-install key at /etc/patch-manager/keys/secret-encryption.key, separate from health-check.key for blast-radius isolation. MASKED placeholder behavior in API responses is preserved.

23 files changed, +1248 / -28. Closes #6.

2026-06-03 15:08:25 -05:00

key-management.md

fix(security): encrypt app secrets at rest with AES-256-GCM (#6 )

2026-06-03 15:08:25 -05:00

restore.md

feat(M11+M12): Email notifications, audit hardening, deployment packaging, backup/DR, integration testing

2026-04-24 00:45:51 +00:00

reverse-proxy-deployment.md

fix(security): harden IP allowlist against XFF bypass and spoofing (#3 )

2026-06-02 18:06:43 -05:00