• 0 Posts
  • 11 Comments
Joined 2 years ago
cake
Cake day: June 12th, 2023

help-circle


  • No, ssds have a ton of wear leveling where data is shifted around and not deleted. Deleting data wears out the SSD, so it is held as much as possible with the controller. SSDs are like 10% bigger than advertised just to prolong the life.

    Even if you write the whole thing with random data then zeros, it will still have blocks in unaccessible (to normal users) places that contain old data.

    Always best to use disk encryption or keep any sensitive data in filesystem encryption like plasma vaults or fscrypt.



  • I am doing something similar. I use OIDC for everything possible.

    Authelia is quite picky about everything being correctly populated, but if I remember right, the documentation doesn’t do a great job of explaining different variables for someone outside of the security industry (similar with traefik). I found a good tutorial via search that got all of the defaults set up, then playing with the options to my liking and now it is just copy pasting the condiguration per app that I want to enable, generating an key and hashing it.

    If you want, I can sanitize my config and share it?