mirror of
https://github.com/narrrl/narl-workspace.git
synced 2026-11-03 16:41:27 +01:00
nvrl
cc7d05aaf2
WORKSPACE_SESSION_KEY_FILE names a file holding a 32-byte key, meant to be a Docker secret. When it is set, proton-session.json is written as AES-256-GCM ciphertext, so a copy of the data volume alone no longer carries a usable session. That is what the OS keyring gives a native host, for a container that has no Secret Service. A plain session found while a key is set is sealed the first time it is read. A sealed file without its key, or a malformed key file, is an error at startup rather than a quiet fall back to plain JSON.
17 lines
185 B
Plaintext
17 lines
185 B
Plaintext
# rust
|
|
/target
|
|
|
|
# runtime state: sqlite db + uploaded media
|
|
/data
|
|
|
|
# frontend
|
|
/web/dist
|
|
/web/node_modules
|
|
|
|
# secrets
|
|
.env
|
|
/secrets
|
|
|
|
# host-specific compose overlay
|
|
compose.override.yml
|