this post was submitted on 23 Sep 2024
51 points (96.4% liked)

Selfhosted

40218 readers
904 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
 

Hey everyone! :)

I am currently looking to replace Obsidian with a self-hostable alternative (that preferably also uses Markdown - but it's not a must) but instead of storing the files directly on disk has a way to have all the files within in an encrypted vault / binary format.

Reason being I have very very sensitive data that needs to be stored (employee & medically related).

I read that Logseq used to support this feature but it has since been deprecated, some light googling didn't surface any results other than that so I would be delighted if anyone had any suggestions!

Thanks so much in advance for any and all help! :)

edit: Forgot to mention that it needs to support Linux as well as Android

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 8 points 1 month ago* (last edited 1 month ago) (5 children)

if you're encrypting at rest you also have to consider where there encryption key is being stored.

if you're storing the encryption key plaintext on the same drive as the data, there's not much of a point in encrypting.

a TPM/HSM could solve the issue, depending on how far down the rabbit hole you need to go.

EDIT: You could also encrypt the disk of the VM/Server hosting the app. similar situation.

[–] [email protected] 2 points 1 month ago* (last edited 1 month ago) (4 children)

In my mind at least this would be solved by the "vault" needing to be decrypted with a password every time notes are accessed/saved with the password acting as the key? I'm not terribly well educated on encryption though.

[–] [email protected] 2 points 1 month ago

if you want to type the key yourself each time this could work. I'm not aware of an app that does this but it wouldn't be too hard I don't think.

load more comments (3 replies)
load more comments (3 replies)