Showing articles from Security tag
LUKS on Every Data Volume
Full-disk encryption for servers I will never physically see, and why the unlock step stays manual.
Secrets That Live in Git
How SOPS and two GPG keys let me commit every credential this platform needs to the repository itself.