Ilker ManapandClaude Opus 5 cd3233ffe8 Do not leave the key store world-readable ...

SQLite creates its file with the process umask, which on a stock system means
every account on the machine can read it. What is in there is not a working
credential — keys are stored hashed — but it is the whole tenancy tree and
every request anyone made, and that should not depend on an operator
remembering to chmod it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-09-16 09:01:41 +02:00

..

migrations/sqlite

Add the store: tenancy, keys and usage on SQLite

2026-09-16 08:37:40 +02:00

keys_test.go

Add the store: tenancy, keys and usage on SQLite

2026-09-16 08:37:40 +02:00

keys.go

Add the store: tenancy, keys and usage on SQLite

2026-09-16 08:37:40 +02:00

migrate.go

Add the store: tenancy, keys and usage on SQLite

2026-09-16 08:37:40 +02:00

sqlite.go

Do not leave the key store world-readable

2026-09-16 09:01:41 +02:00

store_test.go

Do not leave the key store world-readable

2026-09-16 09:01:41 +02:00

store.go

Add a landing page and a read-only cluster dashboard

2026-09-16 08:58:05 +02:00