halkyon/.dockerignore
Tizian 「ティツィアーン」 3bc0bae6e3
feat(keys): halkyon_keys, an account's keys on the device
ADR 0017's step 1, on libsodium (sodium 4.1.0+1, whose build hook
compiles the libsodium 1.0.22 it ships: a C compiler and make wherever
it builds):
- Argon2id (64 MiB, 3 passes, kept with the account and never below
  that) makes a master key, which libsodium's KDF splits into SRP's
  secret (x) and the key-encryption key.
- The account's X25519 and Ed25519 key pairs, their private halves
  wrapped with XChaCha20-Poly1305 under the KEK and under the recovery
  key, bound to their public keys.
- A 24-word BIP-39 recovery phrase (the English list, MIT) and the
  recovery key derived from it.
- Data keys sealed to the account with crypto_box_seal, bound to their
  IDs; content in ADR 0002's envelope, encrypted with a data key and
  signed with Ed25519 (detached), bound to a context the caller names.
- Secrets in libsodium's guarded memory where its API takes them.
- Tests: libsodium's Argon2id known answers, BIP-39's English vectors,
  round trips and every refusal.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
2026-10-22 18:11:09 +02:00

37 lines
1 KiB
Text

# The Docker build context is the repository root. Nothing secret, local or bulky
# goes into it: Learn's server's and curator's Dockerfiles copy their whole package
# folders (and the server the module it builds on, with the module's client, which the
# module's tests depend on).
# Secrets and local state
**/config/passwords.yaml
# Dictionary files: tens of megabytes, mounted on an instance, never built in
apps/learn/halkyon_learn_server/dictionaries/
deploy/dictionaries/
# Published studysets' repositories of a development server
apps/learn/halkyon_learn_server/repositories/
apps/learn/halkyon_learn_server/.serverpod/
deploy/.env
**/*.log
# Tooling and build output
.git/
**/.dart_tool/
**/build/
.vscode/
.claude/
# Not needed to build the server or the curator
apps/learn/halkyon_learn_flutter/
apps/learn/halkyon_learn_client/
apps/learn/tool/
apps/todo/
packages/halkyon_app/
packages/halkyon_core/
packages/halkyon_interop/
packages/halkyon_keys/
packages/halkyon_ui/
docs/
snap/
NEXT.md
SHARED-PACKAGES.md