fediversity/fediversity

Watch

code passes security check #291

New issue

Open

opened 2025-04-01 20:47:44 +02:00 by kiara · 0 comments

kiara commented

2025-04-01 20:47:44 +02:00

Owner

In order to verify Fediversity may be put into production, we should have our code pass an independent security compliance audit in adherence to the standards set out in the General Data Protection Regulation (GDPR).

To ensure this serves our goals, this check should cover code spanning at least the features laid out in:

#347:
- #100
#349 (Owner: @koen @ ProcoliX):
- #228

Achieving this would involve at least:

#493 Credentials handled
#87 TLS certificates handled
#313 Hypervisor users segregated
#633 Inter-node access authenticated
#1090 remote code execution and external repo pins for service portability

c.f. https://codeberg.org/kiara/e2ed-hetzner/issues/10

In order to verify Fediversity may be put into production, we should have our code pass an independent security compliance audit in adherence to the standards set out in the [General Data Protection Regulation](https://gdpr-info.eu/) (GDPR). To ensure this serves our goals, this check should cover code spanning at least the features laid out in: 1. #347: - #100 1. #349 (**Owner**: @koen @ ProcoliX): - #228 Achieving this would involve at least: 1. #493 Credentials handled 1. #87 TLS certificates handled 1. #313 Hypervisor users segregated 1. #633 Inter-node access authenticated 1. #1090 remote code execution and external repo pins for service portability   c.f. https://codeberg.org/kiara/e2ed-hetzner/issues/10

kiara added a new dependency

2025-04-01 20:49:02 +02:00

#228 [D2.3] brought into production [2027-11-01]

kiara added a new dependency

2025-04-01 20:59:00 +02:00

#272 support password-protected personal SSH keys for deploying services in development

kiara added a new dependency

2025-04-01 22:57:17 +02:00

#295 limit security impact of SSH access to service VMs

kiara added a new dependency

2025-04-01 23:01:17 +02:00

#127 Keeping applications' nix packages up-to-date

kiara added a new dependency

2025-04-01 23:01:24 +02:00

#155 Address CI friction between security and caching

kiara added a new dependency

2025-04-01 23:01:30 +02:00

#198 switch panel db from sqlite to postgresql

kiara added a new dependency

2025-04-02 16:44:02 +02:00

#26 Set up a secret management scheme

kiara added a new dependency

2025-04-02 16:46:33 +02:00

#24 Disable root SSH authentication altogether

kiara added a new dependency

2025-04-28 18:36:05 +02:00

#87 Replace snakeoil-key with proper secret

kiara added the

label

2025-05-01 12:19:15 +02:00

kiara referenced this issue

2025-05-05 19:48:02 +02:00

ephemeral state is automatically provisioned #314

kiara added

and removed

labels

2025-06-01 10:21:51 +02:00

kiara added a new dependency

2025-06-01 11:12:00 +02:00

#349 exploit our work by enabling reproducible deployments of an initial set of portable applications

kiara changed title from ~~security~~ to security audit

2025-06-01 11:12:16 +02:00

kiara changed title from ~~security audit~~ to code passes security audit

2025-06-01 12:39:00 +02:00

kiara changed title from ~~code passes security audit~~ to code passes security check

2025-06-05 12:35:05 +02:00

kiara referenced this issue

2025-06-09 21:10:43 +02:00

initial focus on single application for development #327

~~kiara referenced this issue 2025-06-09 23:00:55 +02:00~~

application offering delegated #369

kiara referenced this issue

2025-06-10 19:43:11 +02:00

exploit our work by enabling reproducible deployments of an initial set of portable applications #349

kiara referenced this issue

2025-06-10 19:59:59 +02:00

[D2.3] brought into production [2027-11-01] #228

kiara removed a dependency

2025-06-16 12:00:00 +02:00

#349 exploit our work by enabling reproducible deployments of an initial set of portable applications

kiara added a new dependency

2025-07-16 10:39:40 +02:00

#463 secrets may be handled securely w.r.t. use in PRs

kiara added a new dependency

2025-12-02 22:00:57 +01:00

#614 catch up on nixpkgs updates

kiara added a new dependency

2025-12-03 15:56:05 +01:00

#633 nodes can identify one another

kiara added a new dependency

2025-12-04 11:39:01 +01:00

#313 back-end supports multiple users

kiara added a new dependency

2025-12-11 15:31:04 +01:00

#493 portable ephemeral state

kiara referenced this issue

2026-02-16 15:07:10 +01:00

application offering delegated #369

kiara referenced this issue

2026-04-24 21:25:51 +02:00

WIP: configuration/README.md: First draft #846

kiara added a new dependency

2026-05-22 22:00:04 +02:00

#991 internal networks secured

kiara added the

label

2026-06-11 15:31:27 +02:00

kiara added a new dependency

2026-06-17 15:20:30 +02:00

#1090 remote code execution and external repo pins for service portability

kiara added a new dependency

2026-07-03 20:37:42 +02:00

#1178 prefix-based source allowlist mechanism defeated by forgejo's upward navigation

kiara added a new dependency

2026-07-30 14:59:27 +02:00

#1217 openbao secrets engine for application-specific credential refresh

kiara added a new dependency

2026-10-01 17:45:10 +02:00

#1916 panel: allow only known procedures in the authorization callback, and only from api/

kiara added a new dependency

2026-10-01 17:45:10 +02:00

#1917 panel: refuse / in user names, and match the owner of a deployment exactly

kiara added a new dependency

2026-10-01 17:45:11 +02:00

#1918 panel: destroy the deployments of an account when the account is removed

kiara added a new dependency

2026-10-01 17:45:11 +02:00

#1939 api: refuse to start without AUTHZ_CALLBACK_URL outside of development

kiara added a new dependency

2026-10-01 17:45:11 +02:00

#1922 panel: remove the windmill access to the SSH key of the panel and tf-env

kiara added a new dependency

2026-10-01 17:45:11 +02:00

#314 ephemeral state is automatically provisioned

kiara referenced this issue

2026-10-08 19:36:55 +02:00

back-end supports multiple users #313

Sign in to join this conversation.

No labels

application-offering

configure-applications

ambition/install-applications

update-applications

user-management

fediversity-panel

project-management

application-developer

application-operator

hosting-provider

user experience

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Blocks

#228 [D2.3] brought into production [2027-11-01]

fediversity/fediversity

Depends on

#24 Disable root SSH authentication altogether

fediversity/fediversity

#26 Set up a secret management scheme

fediversity/fediversity

#87 Replace snakeoil-key with proper secret

fediversity/fediversity

#127 Keeping applications' nix packages up-to-date

fediversity/fediversity

#155 Address CI friction between security and caching

fediversity/fediversity

#198 switch panel db from sqlite to postgresql

fediversity/fediversity

#272 support password-protected personal SSH keys for deploying services in development

fediversity/fediversity

#295 limit security impact of SSH access to service VMs

fediversity/fediversity

#313 back-end supports multiple users

fediversity/fediversity

#314 ephemeral state is automatically provisioned

fediversity/fediversity

#463 secrets may be handled securely w.r.t. use in PRs

fediversity/fediversity

#493 portable ephemeral state

fediversity/fediversity

#614 catch up on nixpkgs updates

fediversity/fediversity

#633 nodes can identify one another

fediversity/fediversity

#991 internal networks secured

fediversity/fediversity

#1090 remote code execution and external repo pins for service portability

fediversity/fediversity

#1178 prefix-based source allowlist mechanism defeated by forgejo's upward navigation

fediversity/fediversity

#1217 openbao secrets engine for application-specific credential refresh

fediversity/fediversity

#1916 panel: allow only known procedures in the authorization callback, and only from api/

fediversity/fediversity

#1918 panel: destroy the deployments of an account when the account is removed

fediversity/fediversity

#1917 panel: refuse / in user names, and match the owner of a deployment exactly

fediversity/fediversity

#1922 panel: remove the windmill access to the SSH key of the panel and tf-env

fediversity/fediversity

#1939 api: refuse to start without AUTHZ_CALLBACK_URL outside of development

fediversity/fediversity

Reference

fediversity/fediversity#291

No description provided.