r-zakarya
ec4fa433a9
Alternative to WebDAV, and the base for an Android client. The server never decrypts: it stores and serves opaque bytes, so a compromise yields ciphertext plus size and mtime. GET only for now, with a strong ETag and If-None-Match; PUT answers 405 explicitly so a client fails loudly rather than believing it wrote. A bad token answers 404 like a missing snapshot, so an unauthenticated caller learns nothing. HTTPS is required - the bearer token rides a header on every call.
73 lines
1.5 KiB
Plaintext
73 lines
1.5 KiB
Plaintext
|
|
vault-error.log
|
|
|
|
# Vault database — contains user secrets (encrypted but still secret).
|
|
# Auto-created on first run by the Delphi/PHP backend via InitDatabase().
|
|
# Never track this file. Use vault.db.example for schema reference if needed.
|
|
vault.db
|
|
vault.db-journal
|
|
vault.db-wal
|
|
vault.db-shm
|
|
|
|
# Delphi build artifacts
|
|
*.dcu
|
|
*.dcp
|
|
*.dpu
|
|
*.local
|
|
*.identcache
|
|
*.dsk
|
|
*.~dsk
|
|
*.~*
|
|
*.~bpl
|
|
*.~dll
|
|
*.~exe
|
|
*.exe
|
|
*.dll
|
|
*.bpl
|
|
*.so
|
|
*.dylib
|
|
__history/
|
|
__recovery/
|
|
Win32/
|
|
Win64/
|
|
OSX64/
|
|
Android/
|
|
iOSDevice64/
|
|
|
|
# Debug logs (created at runtime next to the exe)
|
|
pm-debug.log
|
|
|
|
# Asset build log (regenerated by BuildAssets.cmd/ps1)
|
|
delphi-backend/assets/build.log
|
|
|
|
# Embedded-assets output (regenerated by BuildAssets before every Delphi build,
|
|
# then linked into the exe — the files themselves are throwaway intermediates).
|
|
delphi-backend/assets/assets.res
|
|
delphi-backend/assets/assets.rc
|
|
delphi-backend/assets/assets.inc
|
|
|
|
# Local-only debug / packaging artefacts next to the exe.
|
|
delphi-backend/build.log
|
|
delphi-backend/config.txt
|
|
delphi-backend/PMServer.rar
|
|
|
|
# Quick-unlock DPAPI blob — device-bound, MUST NOT be committed.
|
|
delphi-backend/quickunlock.bin
|
|
|
|
# Vault backup copies users keep next to the exe while testing.
|
|
delphi-backend/vault*.db
|
|
delphi-backend/vault - Copie*.db
|
|
|
|
# Screenshots / scratch images dropped in the repo root during dev.
|
|
*.png
|
|
*.jpg
|
|
*.jpeg
|
|
|
|
# Delphi build artifacts
|
|
delphi-backend/*.vrc
|
|
delphi-backend/*.$manifest
|
|
|
|
# PHP sync endpoint — holds the bearer token / the snapshot itself
|
|
server-php/config.php
|
|
vault-data/
|