stwaidele/dorfteich
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases 22 Wiki Activity

#228: security documentation (VS-NfD) #273

Merged
fable-5 merged 1 commits from issue-228-security-documentation into main 2026-07-31 10:56:19 +02:00
Conversation 0 Commits 1 Files Changed 2 +279 -2
fable-5 commented 2026-07-31 09:54:02 +02:00
Collaborator
Copy Link

Adds docs/vs-nfd/60-sicherheitsdokumentation.md: components+privileges, digit-exact network plan, data flows (auth/editing/export/backup/read channels), trust boundaries, complete content-copy list (basis for the #229 deletion concept). Consolidates existing reference docs; Mermaid diagrams; German.

Adds docs/vs-nfd/60-sicherheitsdokumentation.md: components+privileges, digit-exact network plan, data flows (auth/editing/export/backup/read channels), trust boundaries, complete content-copy list (basis for the #229 deletion concept). Consolidates existing reference docs; Mermaid diagrams; German.
fable-5 added 1 commit 2026-07-31 09:54:03 +02:00
#228: security documentation (architecture, data flows, network plan)
Some checks failed
CI / Lint, typecheck, test (pull_request) Successful in 6m26s
Details
CI / Build container images (pull_request) Successful in 13s
Details
CI / Auth e2e pack (pull_request) Successful in 9m27s
Details
CI / Import/export fidelity gate (pull_request) Failing after 13s
Details
1cf0458593 
docs/vs-nfd/60-sicherheitsdokumentation.md: component diagram with per-
service purpose and privileges, network plan digit-exact against the
deploy compose (127.0.0.1-only app bindings, internal-only data zone),
data-flow diagrams (auth, realtime editing incl. LISTEN/NOTIFY and the
60s collab token, export via the pinned sidecars, backup incl. the
ADR-0026 allowlist, and every read channel), named trust boundaries
(reverse proxy, plugin sandbox, outbound SMTP/mirror), and the complete
list of content copies — in-database, on-volume and outside the
instance — that the deletion concept in #229 builds on. Mermaid only,
German (assessor audience), with the maintained-in-same-PR rule stated.

Co-Authored-By: Claude Fable 5 (1M context) <noreply@anthropic.com>
fable-5 force-pushed issue-228-security-documentation from 1cf0458593 to f0c6af4412 2026-07-31 10:35:39 +02:00 Compare
fable-5 merged commit f0c6af4412 into main 2026-07-31 10:56:19 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
area:auth

   
area:docs

   
area:export

   
area:ops

   
area:storage

   
area:supply-chain

   
auth

Authentication, permissions, quotas

  
backend

API server (apps/api)

  
blocked

Blocked on external dependency/infrastructure

  
collab

Collaboration server (apps/collab)

  
deployment

Docker, CI/CD, hosting

  
docs

Documentation

  
effort:L

   
effort:M

   
effort:S

   
frontend

SPA (apps/web)

  
plugins

Plugin system and SDK

  
qa

Tests, fixtures, e2e

  
vs-nfd

   
vs-nfd:blocker
No Label
area:auth
area:docs
area:export
area:ops
area:storage
area:supply-chain
auth
backend
blocked
collab
deployment
docs
effort:L
effort:M
effort:S
frontend
plugins
qa
vs-nfd
vs-nfd:blocker
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: stwaidele/dorfteich#273
No description provided.
Delete Branch "issue-228-security-documentation"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?