Core packages: crypto (Argon2id/AES-256-GCM), config (TOML/viper), db (SQLite/migrations), barrier (encrypted storage), seal (state machine with rate-limited unseal), auth (MCIAS integration with token cache), policy (priority-based ACL engine), engine (interface + registry). Server: HTTPS with TLS 1.2+, REST API, auth/admin middleware, htmx web UI (init, unseal, login, dashboard pages). CLI: cobra/viper subcommands (server, init, status, snapshot) with env var override support (METACRYPT_ prefix). Operational tooling: Dockerfile (multi-stage, non-root), docker-compose, hardened systemd units (service + daily backup timer), install script, backup script with retention pruning, production config examples. Runbook covering installation, configuration, daily operations, backup/restore, monitoring, troubleshooting, and security procedures. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
28 lines
297 B
Plaintext
28 lines
297 B
Plaintext
# Binary (root only, not cmd/metacrypt/)
|
|
/metacrypt
|
|
/metacrypt.exe
|
|
|
|
# Database
|
|
*.db
|
|
*.db-wal
|
|
*.db-shm
|
|
|
|
# Backups
|
|
backup.db
|
|
|
|
# TLS certs (never commit real certs)
|
|
certs/
|
|
|
|
# Config with real values (root only, not examples/)
|
|
/metacrypt.toml
|
|
|
|
# IDE
|
|
.idea/
|
|
.vscode/
|
|
*.swp
|
|
*~
|
|
|
|
# OS
|
|
.DS_Store
|
|
Thumbs.db
|