support GPG encryption

[ttionya]

#135 #105

[ttionya]

I have released version v1.20.0-beta.0. After my initial testing, it seems to work well, but I need more testing to ensure it works under various scenarios. Additionally, I haven't finished writing the documentation yet, but I will continue to work on it. Once the documentation is complete and I feel that testing is sufficient, I will release the stable version.

Here's a brief description of how to use GPG and some notes:

Added the environment variable GPG_BASE64_PUBKEY. Please use base64 -w 0 <your public key file> to generate it. Once this variable is configured, GPG will be enabled, and the ZIP_PASSWORD will no longer be used.

To decrypt, please use the command gpg --decrypt backup.zip.gpg > backup.zip.

[ttionya]

I have released version v1.20.0-beta.0. After my initial testing, it seems to work well, but I need more testing to ensure it works under various scenarios. Additionally, I haven't finished writing the documentation yet, but I will continue to work on it. Once the documentation is complete and I feel that testing is sufficient, I will release the stable version.

Here's a brief description of how to use GPG and some notes:

Added the environment variable GPG_BASE64_PUBKEY. Please use base64 -w 0 <your public key file> to generate it. Once this variable is configured, GPG will be enabled, and the ZIP_PASSWORD will no longer be used.

To decrypt, please use the command gpg --decrypt backup.zip.gpg > backup.zip.

@AtomAsking , GPG encryption is now available for use. Any help with testing would be greatly appreciated.

[Lenart12]

What is the benefit of this? Doesn't vaultwarden only store user data that is already encrypted and only clients can see the contents... What is the point of encrypting twice 🤔

[ttionya]

@Lenart12,

Vaultwarden handles encryption for sensitive information such as passwords, storing them securely. However, user and organizational information remains in plaintext. To mitigate the risk of data leakage, it is essential to encrypt the database itself.

[skypigr]

Any plan to include this feature to stable?

[qaq112233]

I look forward to this feature being added to the stable version.