acmcsufoss / acm-server

Terraform deployment files for acmCSUF.
MIT License
6 stars 2 forks source link

Migration plan for acmRegister bot #33

Open diamondburned opened 3 months ago

diamondburned commented 3 months ago

ElephantSQL is shutting down. We should look into data storage solutions both locally (on our servers) and on another free tier cloud solutions.

Concern: Data Security and Privacy

Currently, on prem servers can be peeked into if you get access to the hard drive.

To prevent this, I propose we use LUKS disk encryption with systemd support for TPM keys so that the process of decryption can be automatic without compromising security.

This does not address the issue of redundancy, however.

Concern: Data Redundancy

We still want to look into out of band backups, specifically in a way that guarantees secrecy, for example. Perhaps we could send encrypted snapshots to different potentially untrusted peers?

We should also still look into free tier cloud if possible, for sure.

The deadline for this is December 2024.

EthanThatOneKid commented 3 months ago

14AA9753-472C-40D5-90E3-23A2C96C69EB

diamondburned commented 2 months ago

The deadline for this was incorrect so I updated it. Thanks Ethan for the screenshot!