datasec

package

v1.1.0 Latest Latest Go to latest Published: Jul 16, 2026 License: AGPL-3.0 Imports: 12 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/AppsGanin/rospanel

Links

Open Source Insights

Documentation ¶

Overview ¶

Package datasec provides at-rest encryption for secrets stored in SQLite.

The key lives in dataDir/secrets.key (mode 0600) and IS included in backup archives — the encrypted DB is useless without it, so a backup that left it out would not restore to a working panel on a fresh host. The trade-off is that a backup archive is as sensitive as the key itself: treat it accordingly.

Index ¶

func Decrypt(s string) (string, error)
func Encrypt(s string) (string, error)
func EncryptFile(path string) ([]byte, error)
func Init(dataDir string) error

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func Decrypt ¶

func Decrypt(s string) (string, error)

Decrypt returns plaintext; values without enc:v1: pass through (legacy rows).

func Encrypt ¶

func Encrypt(s string) (string, error)

Encrypt returns s unchanged when empty; otherwise an enc:v1:… blob.

func EncryptFile ¶

func EncryptFile(path string) ([]byte, error)

EncryptFile reads path and returns encrypted bytes (AES-GCM, random nonce prepended).

func Init ¶

func Init(dataDir string) error

Init loads or creates the per-install encryption key. Call once before opening the store.

Types ¶

This section is empty.

Source Files ¶

View all Source files

datasec.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL