ZacharyZhang-NYandClaude Opus 4.6
e390e68594
Full self-hosted port of the Elydora tamper-evident audit protocol: - Hono API server with PostgreSQL, Redis, MinIO adapters - Ed25519 signed operations, chain hashing, Merkle epoch rollups - PBKDF2 password hashing, HMAC-SHA256 JWT, 5-role RBAC - Next.js management console - Node.js, Python, and Go SDKs - Docker Compose for local deployment - Helm chart for Kubernetes - Comprehensive security hardening and audit fixes applied Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
26 lines
699 B
Bash
Executable File
26 lines
699 B
Bash
Executable File
#!/bin/sh
|
|
# Generates an Ed25519 signing key and a random JWT secret for initial setup.
|
|
# Requires: openssl
|
|
set -e
|
|
|
|
echo "=== Elydora Key Generation ==="
|
|
echo ""
|
|
|
|
# Generate Ed25519 private key and export as base64url
|
|
SIGNING_KEY=$(openssl genpkey -algorithm ed25519 2>/dev/null \
|
|
| openssl pkcs8 -topk8 -nocrypt -outform DER 2>/dev/null \
|
|
| tail -c 32 \
|
|
| base64 \
|
|
| tr '+/' '-_' \
|
|
| tr -d '=\n')
|
|
|
|
# Generate 32-byte random JWT secret as hex
|
|
JWT_SECRET=$(openssl rand -hex 32)
|
|
|
|
echo "Add these to your .env file:"
|
|
echo ""
|
|
echo "ELYDORA_SIGNING_KEY=${SIGNING_KEY}"
|
|
echo "JWT_SECRET=${JWT_SECRET}"
|
|
echo ""
|
|
echo "WARNING: Store these values securely. Do not commit them to version control."
|