Paul LütznerandClaude Fable 5 1adac1fe40 Carry an instance's configuration in one password-sealed file ...

Export from the admin area: env secrets, the JWT keypair and the
database-held provider credentials - FCM included, decrypted inside the
envelope because the restore target holds a different encryption key -
sealed with Argon2id and secretbox at parameters a Raspberry Pi can
afford, in a documented format a php one-liner can open without plMail.

Import shows its plan before touching anything: what it can write is
written and re-encrypted under this instance's key, what it cannot -
process environment, the Postgres role's own password - is rendered as
the exact lines to place by hand. The install wizard offers the same
restore before the first account exists, behind the same guard that
closes /install forever afterwards.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-06 19:12:21 +02:00

..

install.html.twig

Carry an instance's configuration in one password-sealed file

2026-08-06 19:12:21 +02:00

restore.html.twig

Carry an instance's configuration in one password-sealed file

2026-08-06 19:12:21 +02:00