ElephantSQL is shutting down. We should look into data storage solutions both locally (on our servers) and on another free tier cloud solutions.
Concern: Data Security and Privacy
Currently, on prem servers can be peeked into if you get access to the hard drive.
To prevent this, I propose we use LUKS disk encryption with systemd support for TPM keys so that the process of decryption can be automatic without compromising security.
This does not address the issue of redundancy, however.
Concern: Data Redundancy
We still want to look into out of band backups, specifically in a way that guarantees secrecy, for example. Perhaps we could send encrypted snapshots to different potentially untrusted peers?
We should also still look into free tier cloud if possible, for sure.
The deadline for this is December 2024.
ElephantSQL is shutting down. We should look into data storage solutions both locally (on our servers) and on another free tier cloud solutions.
Concern: Data Security and Privacy
Currently, on prem servers can be peeked into if you get access to the hard drive.
To prevent this, I propose we use LUKS disk encryption with systemd support for TPM keys so that the process of decryption can be automatic without compromising security.
This does not address the issue of redundancy, however.
Concern: Data Redundancy
We still want to look into out of band backups, specifically in a way that guarantees secrecy, for example. Perhaps we could send encrypted snapshots to different potentially untrusted peers?
We should also still look into free tier cloud if possible, for sure.
The deadline for this is December 2024.