Šepot — end-to-end encrypted messenger

Initial public release. Anonymous on-device identity (no phone number,
e-mail, or password), Signal-protocol cryptography (X3DH + PQXDH, Double
Ratchet, sealed sender) via libsignal, a metadata-minimizing relay,
group chats, disappearing messages, encrypted local storage, optional
Tor transport, and a UI localized into Czech, English, German, Russian,
and Italian.

Monorepo: Flutter client (app/), Rust relay + wire types (rust/),
protobuf definitions (proto/), self-host deploy (deploy/).

Licensed under AGPL-3.0 with an app-store distribution exception (§7).

deploy/relay/backup.sh

@@ -0,0 +1,52 @@
+#!/usr/bin/env bash
+# Denní záloha sepot-relay — KRITICKÉ.
+#
+#   db-data  → drží relay_keys = trust root CA sealed senderu. Klienti ho
+#              pinují; ztráta/regenerace = všichni klienti tvrdě odmítnou
+#              relay ("trust root se změnil").
+#   tor-keys → onion identita (hs_ed25519_secret_key). Ztráta = nová onion
+#              adresa pro všechny.
+#
+# Obojí obsahuje TAJNÉ klíče → zálohy jen chmod 700, umask 077.
+# Nasazení cronu: viz README.md „Zálohy".
+set -euo pipefail
+umask 077
+
+BACKUP_DIR=/opt/backups/sepot-relay
+KEEP_DAYS=14
+STAMP=$(date +%F_%H%M)
+
+mkdir -p "$BACKUP_DIR"
+chmod 700 "$BACKUP_DIR"
+
+db_file="$BACKUP_DIR/db_${STAMP}.sql.gz"
+tor_file="$BACKUP_DIR/tor-keys_${STAMP}.tgz"
+
+# 1) Postgres dump (relay_keys = trust root CA)
+docker exec sepot-relay-db pg_dump -U sepot sepot_relay | gzip > "$db_file"
+
+# 2) Tor onion identita — jen podadresář hidden service (hostname +
+#    hs_ed25519_*). Zbytek DataDirectory (cache konsenzu) je regenerovatelný
+#    a jen by churnoval. Read-only mount, ať se běžícímu toru nic nerozbije.
+docker run --rm -v sepot-relay_tor-keys:/k:ro -v "$BACKUP_DIR":/b alpine \
+  tar czf "/b/tor-keys_${STAMP}.tgz" -C /k sepot
+# docker run vytvoří soubor s umaskou kontejneru (ne skriptu) → obsahuje
+# TAJNÝ onion klíč, natvrdo zamknout
+chmod 600 "$tor_file"
+
+# 3) Integrita — prázdný/rozbitý dump je horší než žádný (maskuje selhání)
+if [ ! -s "$db_file" ] || ! gzip -t "$db_file" 2>/dev/null; then
+  echo "$(date -Is) CHYBA: DB dump prázdný nebo poškozený ($db_file)" >&2
+  rm -f "$db_file"
+  exit 1
+fi
+if [ ! -s "$tor_file" ]; then
+  echo "$(date -Is) CHYBA: tor-keys archiv prázdný ($tor_file)" >&2
+  exit 1
+fi
+
+# 4) Rotace — držet posledních KEEP_DAYS dní
+find "$BACKUP_DIR" -maxdepth 1 -name 'db_*.sql.gz'    -mtime +"$KEEP_DAYS" -delete
+find "$BACKUP_DIR" -maxdepth 1 -name 'tor-keys_*.tgz' -mtime +"$KEEP_DAYS" -delete
+
+echo "$(date -Is) OK db=$(du -h "$db_file" | cut -f1) tor=$(du -h "$tor_file" | cut -f1)"