Jarian Cottingham 15b9be929c Merge pull request 'Security hardening: credentials, CSRF, XSS, keys, CRL' (#36) from fix/security-hardening into master

2026-07-04 23:19:26 -05:00

.gitea/workflows

CI: remove --no-cache for docker layer caching

2026-07-05 02:57:46 +00:00

api

fix: security hardening - credentials, CSRF, XSS, keys, CRL

2026-07-05 04:19:11 +00:00

landing

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00

.env.example

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00

.gitignore

fix: security hardening - credentials, CSRF, XSS, keys, CRL

2026-07-05 04:19:11 +00:00

Caddyfile

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00

certauth-api.service

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00

nginx-local.conf

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00

PLAN.md

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00

setup-certauth.sh

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00

SKILL.md

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00

Description

Self-contained certificate authority with YubiKey-backed signing. Root + intermediate CA keys on two YubiKeys; every signing requires physical touch + PIN.

MIT 134 KiB

Languages

Python 47.1%

HTML 27.3%

Shell 25.6%