Šepot — end-to-end encrypted messenger

Initial public release. Anonymous on-device identity (no phone number,
e-mail, or password), Signal-protocol cryptography (X3DH + PQXDH, Double
Ratchet, sealed sender) via libsignal, a metadata-minimizing relay,
group chats, disappearing messages, encrypted local storage, optional
Tor transport, and a UI localized into Czech, English, German, Russian,
and Italian.

Monorepo: Flutter client (app/), Rust relay + wire types (rust/),
protobuf definitions (proto/), self-host deploy (deploy/).

Licensed under AGPL-3.0 with an app-store distribution exception (§7).

deploy/relay/tor/Dockerfile

@@ -0,0 +1,10 @@
+# Tor hidden service pro sepot-relay — vlastní minimální image
+# (žádný third-party tor image; privacy produkt nemá kam outsourcovat důvěru)
+FROM alpine:3.22
+RUN apk add --no-cache tor \
+    && mkdir -p /var/lib/tor \
+    && chown -R tor:tor /var/lib/tor \
+    && chmod 700 /var/lib/tor
+COPY torrc /etc/tor/torrc
+USER tor
+CMD ["tor", "-f", "/etc/tor/torrc"]