Oscloud/oscloud-docs
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
70a5ec247e
oscloud-docs/site/security/index.html

1734 lines
36 KiB
HTML
Raw Normal View History

vytvořen soubor site
2024-10-26 18:30:51 +00:00
<!doctype html>
<html lang="en" class="no-js">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width,initial-scale=1">
<meta name="description" content="Oscloud je váš osobní cloud a hosting webových aplikací.">
<link rel="canonical" href="https://docs.oscloud.cz/security/">
<link rel="prev" href="../profile/">
<link rel="next" href="../backups/">
<link rel="icon" href="../img/favicon.ico">
<meta name="generator" content="mkdocs-1.6.1, mkdocs-material-9.5.39">
<title>Security - Oscloud Docs</title>
<link rel="stylesheet" href="../assets/stylesheets/main.8c3ca2c6.min.css">
<link rel="stylesheet" href="../assets/stylesheets/palette.06af60db.min.css">
<link rel="stylesheet" href="../styly/extra.css">
<script>__md_scope=new URL("..",location),__md_hash=e=>[...e].reduce(((e,_)=>(e<<5)-e+_.charCodeAt(0)),0),__md_get=(e,_=localStorage,t=__md_scope)=>JSON.parse(_.getItem(t.pathname+"."+e)),__md_set=(e,_,t=localStorage,a=__md_scope)=>{try{t.setItem(a.pathname+"."+e,JSON.stringify(_))}catch(e){}}</script>
</head>
<body dir="ltr" data-md-color-scheme="default" data-md-color-primary="indigo" data-md-color-accent="indigo">
<input class="md-toggle" data-md-toggle="drawer" type="checkbox" id="__drawer" autocomplete="off">
<input class="md-toggle" data-md-toggle="search" type="checkbox" id="__search" autocomplete="off">
<label class="md-overlay" for="__drawer"></label>
<div data-md-component="skip">
<a href="#zabezpeceni" class="md-skip">
Skip to content
</a>
</div>
<div data-md-component="announce">
</div>
<header class="md-header md-header--shadow" data-md-component="header">
<nav class="md-header__inner md-grid" aria-label="Header">
<a href=".." title="Oscloud Docs" class="md-header__button md-logo" aria-label="Oscloud Docs" data-md-component="logo">
<img src="../img/logo.png" alt="logo">
</a>
<label class="md-header__button md-icon" for="__drawer">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M3 6h18v2H3zm0 5h18v2H3zm0 5h18v2H3z"/></svg>
</label>
<div class="md-header__title" data-md-component="header-title">
<div class="md-header__ellipsis">
<div class="md-header__topic">
<span class="md-ellipsis">
Oscloud Docs
</span>
</div>
<div class="md-header__topic" data-md-component="header-topic">
<span class="md-ellipsis">
Security
</span>
</div>
</div>
</div>
<form class="md-header__option" data-md-component="palette">
<input class="md-option" data-md-color-media="(prefers-color-scheme)" data-md-color-scheme="default" data-md-color-primary="indigo" data-md-color-accent="indigo" aria-label="Switch to light mode" type="radio" name="__palette" id="__palette_0">
<label class="md-header__button md-icon" title="Switch to light mode" for="__palette_1" hidden>
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="m14.3 16-.7-2h-3.2l-.7 2H7.8L11 7h2l3.2 9zM20 8.69V4h-4.69L12 .69 8.69 4H4v4.69L.69 12 4 15.31V20h4.69L12 23.31 15.31 20H20v-4.69L23.31 12zm-9.15 3.96h2.3L12 9z"/></svg>
</label>
<input class="md-option" data-md-color-media="(prefers-color-scheme: light)" data-md-color-scheme="default" data-md-color-primary="white" data-md-color-accent="light-blue" aria-label="Switch to dark mode" type="radio" name="__palette" id="__palette_1">
<label class="md-header__button md-icon" title="Switch to dark mode" for="__palette_2" hidden>
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 8a4 4 0 0 0-4 4 4 4 0 0 0 4 4 4 4 0 0 0 4-4 4 4 0 0 0-4-4m0 10a6 6 0 0 1-6-6 6 6 0 0 1 6-6 6 6 0 0 1 6 6 6 6 0 0 1-6 6m8-9.31V4h-4.69L12 .69 8.69 4H4v4.69L.69 12 4 15.31V20h4.69L12 23.31 15.31 20H20v-4.69L23.31 12z"/></svg>
</label>
<input class="md-option" data-md-color-media="(prefers-color-scheme: dark)" data-md-color-scheme="slate" data-md-color-primary="black" data-md-color-accent="light-blue" aria-label="Switch to system preference" type="radio" name="__palette" id="__palette_2">
<label class="md-header__button md-icon" title="Switch to system preference" for="__palette_0" hidden>
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 18c-.89 0-1.74-.2-2.5-.55C11.56 16.5 13 14.42 13 12s-1.44-4.5-3.5-5.45C10.26 6.2 11.11 6 12 6a6 6 0 0 1 6 6 6 6 0 0 1-6 6m8-9.31V4h-4.69L12 .69 8.69 4H4v4.69L.69 12 4 15.31V20h4.69L12 23.31 15.31 20H20v-4.69L23.31 12z"/></svg>
</label>
</form>
<script>var palette=__md_get("__palette");if(palette&&palette.color){if("(prefers-color-scheme)"===palette.color.media){var media=matchMedia("(prefers-color-scheme: light)"),input=document.querySelector(media.matches?"[data-md-color-media='(prefers-color-scheme: light)']":"[data-md-color-media='(prefers-color-scheme: dark)']");palette.color.media=input.getAttribute("data-md-color-media"),palette.color.scheme=input.getAttribute("data-md-color-scheme"),palette.color.primary=input.getAttribute("data-md-color-primary"),palette.color.accent=input.getAttribute("data-md-color-accent")}for(var[key,value]of Object.entries(palette.color))document.body.setAttribute("data-md-color-"+key,value)}</script>
<label class="md-header__button md-icon" for="__search">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.52 6.52 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5"/></svg>
</label>
<div class="md-search" data-md-component="search" role="dialog">
<label class="md-search__overlay" for="__search"></label>
<div class="md-search__inner" role="search">
<form class="md-search__form" name="search">
<input type="text" class="md-search__input" name="query" aria-label="Search" placeholder="Search" autocapitalize="off" autocorrect="off" autocomplete="off" spellcheck="false" data-md-component="search-query" required>
<label class="md-search__icon md-icon" for="__search">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.52 6.52 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5"/></svg>
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M20 11v2H8l5.5 5.5-1.42 1.42L4.16 12l7.92-7.92L13.5 5.5 8 11z"/></svg>
</label>
<nav class="md-search__options" aria-label="Search">
<button type="reset" class="md-search__icon md-icon" title="Clear" aria-label="Clear" tabindex="-1">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M19 6.41 17.59 5 12 10.59 6.41 5 5 6.41 10.59 12 5 17.59 6.41 19 12 13.41 17.59 19 19 17.59 13.41 12z"/></svg>
</button>
</nav>
<div class="md-search__suggest" data-md-component="search-suggest"></div>
</form>
<div class="md-search__output">
<div class="md-search__scrollwrap" tabindex="0" data-md-scrollfix>
<div class="md-search-result" data-md-component="search-result">
<div class="md-search-result__meta">
Initializing search
</div>
<ol class="md-search-result__list" role="presentation"></ol>
</div>
</div>
</div>
</div>
</div>
</nav>
</header>
<div class="md-container" data-md-component="container">
<main class="md-main" data-md-component="main">
<div class="md-main__inner md-grid">
<div class="md-sidebar md-sidebar--primary" data-md-component="sidebar" data-md-type="navigation" >
<div class="md-sidebar__scrollwrap">
<div class="md-sidebar__inner">
<nav class="md-nav md-nav--primary" aria-label="Navigation" data-md-level="0">
<label class="md-nav__title" for="__drawer">
<a href=".." title="Oscloud Docs" class="md-nav__button md-logo" aria-label="Oscloud Docs" data-md-component="logo">
<img src="../img/logo.png" alt="logo">
</a>
Oscloud Docs
</label>
<ul class="md-nav__list" data-md-scrollfix>
<li class="md-nav__item">
<a href=".." class="md-nav__link">
<span class="md-ellipsis">
Úvodní stránka
</span>
</a>
</li>
<li class="md-nav__item md-nav__item--nested">
<input class="md-nav__toggle md-toggle " type="checkbox" id="__nav_2" >
<label class="md-nav__link" for="__nav_2" id="__nav_2_label" tabindex="0">
<span class="md-ellipsis">
Podpora a kontakty
</span>
<span class="md-nav__icon md-icon"></span>
</label>
<nav class="md-nav" data-md-level="1" aria-labelledby="__nav_2_label" aria-expanded="false">
<label class="md-nav__title" for="__nav_2">
<span class="md-nav__icon md-icon"></span>
Podpora a kontakty
</label>
<ul class="md-nav__list" data-md-scrollfix>
<li class="md-nav__item">
<a href="../support/" class="md-nav__link">
<span class="md-ellipsis">
Podpora
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../contact/" class="md-nav__link">
<span class="md-ellipsis">
Kontaktujte nás
</span>
</a>
</li>
</ul>
</nav>
</li>
<li class="md-nav__item md-nav__item--active md-nav__item--nested">
<input class="md-nav__toggle md-toggle " type="checkbox" id="__nav_3" checked>
<label class="md-nav__link" for="__nav_3" id="__nav_3_label" tabindex="0">
<span class="md-ellipsis">
Znalostní báze
</span>
<span class="md-nav__icon md-icon"></span>
</label>
<nav class="md-nav" data-md-level="1" aria-labelledby="__nav_3_label" aria-expanded="true">
<label class="md-nav__title" for="__nav_3">
<span class="md-nav__icon md-icon"></span>
Znalostní báze
</label>
<ul class="md-nav__list" data-md-scrollfix>
<li class="md-nav__item">
<a href="../apps/" class="md-nav__link">
<span class="md-ellipsis">
App
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../certificates/" class="md-nav__link">
<span class="md-ellipsis">
Certifikáty
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../profile/" class="md-nav__link">
<span class="md-ellipsis">
Profil
</span>
</a>
</li>
<li class="md-nav__item md-nav__item--active">
<input class="md-nav__toggle md-toggle" type="checkbox" id="__toc">
<label class="md-nav__link md-nav__link--active" for="__toc">
<span class="md-ellipsis">
Security
</span>
<span class="md-nav__icon md-icon"></span>
</label>
<a href="./" class="md-nav__link md-nav__link--active">
<span class="md-ellipsis">
Security
</span>
</a>
<nav class="md-nav md-nav--secondary" aria-label="Table of contents">
<label class="md-nav__title" for="__toc">
<span class="md-nav__icon md-icon"></span>
Table of contents
</label>
<ul class="md-nav__list" data-md-component="toc" data-md-scrollfix>
<li class="md-nav__item">
<a href="#turnkey-zabezpeceni" class="md-nav__link">
<span class="md-ellipsis">
Turnkey zabezpečení
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#ochrana-soukromi-a-kontrola" class="md-nav__link">
<span class="md-ellipsis">
Ochrana soukromí a kontrola
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#https" class="md-nav__link">
<span class="md-ellipsis">
HTTPS
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#sifrovani-zaloh" class="md-nav__link">
<span class="md-ellipsis">
Šifrování záloh
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#omezeni-pro-hesla" class="md-nav__link">
<span class="md-ellipsis">
Omezení pro hesla
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#izolace-aplikaci-a-sandboxing" class="md-nav__link">
<span class="md-ellipsis">
Izolace aplikací a sandboxing
</span>
</a>
</li>
</ul>
</nav>
</li>
<li class="md-nav__item">
<a href="../backups/" class="md-nav__link">
<span class="md-ellipsis">
Zálohy
</span>
</a>
</li>
</ul>
</nav>
</li>
aktualizace složky site
2024-11-23 19:35:08 +00:00
aktualizace souboru site
2024-12-08 07:21:14 +00:00
vytvořen soubor site
2024-10-26 18:30:51 +00:00
<li class="md-nav__item md-nav__item--nested">
<input class="md-nav__toggle md-toggle " type="checkbox" id="__nav_4" >
<label class="md-nav__link" for="__nav_4" id="__nav_4_label" tabindex="0">
<span class="md-ellipsis">
Aplikace
</span>
<span class="md-nav__icon md-icon"></span>
</label>
<nav class="md-nav" data-md-level="1" aria-labelledby="__nav_4_label" aria-expanded="false">
<label class="md-nav__title" for="__nav_4">
<span class="md-nav__icon md-icon"></span>
Aplikace
</label>
<ul class="md-nav__list" data-md-scrollfix>
<li class="md-nav__item">
aktualizace site souboru
2024-11-03 17:53:11 +00:00
<a href="../apps/bookstack/" class="md-nav__link">
vytvořen soubor site
2024-10-26 18:30:51 +00:00
<span class="md-ellipsis">
BookStack
</span>
</a>
</li>
<li class="md-nav__item">
Přidány návody Castopod, Gitea
2024-11-30 20:05:50 +00:00
<a href="../apps/castopod/" class="md-nav__link">
vytvořen soubor site
2024-10-26 18:30:51 +00:00
<span class="md-ellipsis">
Castopod
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/cryptpad/" class="md-nav__link">
<span class="md-ellipsis">
CryptPad
</span>
</a>
</li>
<li class="md-nav__item">
aktualizace souboru site
2024-12-08 07:21:14 +00:00
<a href="../apps/discourse/" class="md-nav__link">
vytvořen soubor site
2024-10-26 18:30:51 +00:00
<span class="md-ellipsis">
Discourse
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/dokuwiki.md" class="md-nav__link">
<span class="md-ellipsis">
Dokuwiki
</span>
</a>
</li>
<li class="md-nav__item">
Přidány návody Castopod, Gitea
2024-11-30 20:05:50 +00:00
<a href="../apps/gitea/" class="md-nav__link">
vytvořen soubor site
2024-10-26 18:30:51 +00:00
<span class="md-ellipsis">
Gitea
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/githubpages.md" class="md-nav__link">
<span class="md-ellipsis">
GitHub Pages
</span>
</a>
</li>
<li class="md-nav__item">
aktualizace site souboru
2024-11-03 17:13:30 +00:00
<a href="../apps/hedgedoc/" class="md-nav__link">
vytvořen soubor site
2024-10-26 18:30:51 +00:00
<span class="md-ellipsis">
HedgeDoc
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/immich.md" class="md-nav__link">
<span class="md-ellipsis">
Immich
</span>
</a>
</li>
<li class="md-nav__item">
aktualizace site souboru
2024-11-03 17:13:30 +00:00
<a href="../apps/joplin-server/" class="md-nav__link">
vytvořen soubor site
2024-10-26 18:30:51 +00:00
<span class="md-ellipsis">
Joplin Server
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/lamp/" class="md-nav__link">
<span class="md-ellipsis">
LAMP
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/linkding.md" class="md-nav__link">
<span class="md-ellipsis">
Linkding
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/lychee.md" class="md-nav__link">
<span class="md-ellipsis">
Lychee
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/mastodon/" class="md-nav__link">
<span class="md-ellipsis">
Mastodon
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/miniflux.md" class="md-nav__link">
<span class="md-ellipsis">
Miniflux
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/mirotalk/" class="md-nav__link">
<span class="md-ellipsis">
MiroTalk
</span>
</a>
</li>
<li class="md-nav__item">
aktualizace site souboru
2024-11-03 17:13:30 +00:00
<a href="../apps/nextcloud/" class="md-nav__link">
vytvořen soubor site
2024-10-26 18:30:51 +00:00
<span class="md-ellipsis">
Nextcloud
</span>
</a>
</li>
aktualizace souboru site
2024-12-08 07:21:14 +00:00
<li class="md-nav__item">
<a href="../apps/nodebb/" class="md-nav__link">
<span class="md-ellipsis">
NodeBB
</span>
</a>
</li>
vytvořen soubor site
2024-10-26 18:30:51 +00:00
<li class="md-nav__item">
<a href="../apps/ntfy.md" class="md-nav__link">
<span class="md-ellipsis">
ntfy
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/pairdrop/" class="md-nav__link">
<span class="md-ellipsis">
PairDrop
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/peertube.md" class="md-nav__link">
<span class="md-ellipsis">
Peertube
</span>
</a>
</li>
<li class="md-nav__item">
aktualizace souboru site
2024-12-08 07:21:14 +00:00
<a href="../apps/piwigo/" class="md-nav__link">
vytvořen soubor site
2024-10-26 18:30:51 +00:00
<span class="md-ellipsis">
Piwigo
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/pixelfed.md" class="md-nav__link">
<span class="md-ellipsis">
Pixelfed
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/privatebin/" class="md-nav__link">
<span class="md-ellipsis">
PrivateBin
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/rallly.md" class="md-nav__link">
<span class="md-ellipsis">
Rallly
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/roundcube.md" class="md-nav__link">
<span class="md-ellipsis">
Roundcube
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/searxng/" class="md-nav__link">
<span class="md-ellipsis">
SearXNG
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/surfer/" class="md-nav__link">
<span class="md-ellipsis">
Surfer
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/tinytinyrss.md" class="md-nav__link">
<span class="md-ellipsis">
TinyTinyRSS
</span>
</a>
</li>
<li class="md-nav__item">
aktualizace složky site
2024-11-23 19:35:08 +00:00
<a href="../apps/umami/" class="md-nav__link">
vytvořen soubor site
2024-10-26 18:30:51 +00:00
<span class="md-ellipsis">
Umami
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/vaultwarden/" class="md-nav__link">
<span class="md-ellipsis">
Vaultwarden
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apps/vikunja.md" class="md-nav__link">
<span class="md-ellipsis">
Vikunja
</span>
</a>
</li>
aktualizace složky site
2024-11-23 19:35:08 +00:00
<li class="md-nav__item">
<a href="../apps/wallabag/" class="md-nav__link">
<span class="md-ellipsis">
Wallabag
</span>
</a>
</li>
vytvořen soubor site
2024-10-26 18:30:51 +00:00
<li class="md-nav__item">
vytvořen soubor site
2024-11-01 06:39:05 +00:00
<a href="../apps/wordpress-developer/" class="md-nav__link">
vytvořen soubor site
2024-10-26 18:30:51 +00:00
<span class="md-ellipsis">
WordPress (Developer)
</span>
</a>
</li>
<li class="md-nav__item">
přidán wordpress-managed.md
2024-10-31 20:29:34 +00:00
<a href="../apps/wordpress-managed/" class="md-nav__link">
vytvořen soubor site
2024-10-26 18:30:51 +00:00
<span class="md-ellipsis">
WordPress (Managed)
</span>
</a>
</li>
</ul>
</nav>
</li>
<li class="md-nav__item md-nav__item--nested">
<input class="md-nav__toggle md-toggle " type="checkbox" id="__nav_5" >
<label class="md-nav__link" for="__nav_5" id="__nav_5_label" tabindex="0">
<span class="md-ellipsis">
Ceny
</span>
<span class="md-nav__icon md-icon"></span>
</label>
<nav class="md-nav" data-md-level="1" aria-labelledby="__nav_5_label" aria-expanded="false">
<label class="md-nav__title" for="__nav_5">
<span class="md-nav__icon md-icon"></span>
Ceny
</label>
<ul class="md-nav__list" data-md-scrollfix>
<li class="md-nav__item">
<a href="../podporte-nas.md" class="md-nav__link">
<span class="md-ellipsis">
Jak nás podpořit
</span>
</a>
</li>
</ul>
</nav>
</li>
</ul>
</nav>
</div>
</div>
</div>
<div class="md-sidebar md-sidebar--secondary" data-md-component="sidebar" data-md-type="toc" >
<div class="md-sidebar__scrollwrap">
<div class="md-sidebar__inner">
<nav class="md-nav md-nav--secondary" aria-label="Table of contents">
<label class="md-nav__title" for="__toc">
<span class="md-nav__icon md-icon"></span>
Table of contents
</label>
<ul class="md-nav__list" data-md-component="toc" data-md-scrollfix>
<li class="md-nav__item">
<a href="#turnkey-zabezpeceni" class="md-nav__link">
<span class="md-ellipsis">
Turnkey zabezpečení
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#ochrana-soukromi-a-kontrola" class="md-nav__link">
<span class="md-ellipsis">
Ochrana soukromí a kontrola
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#https" class="md-nav__link">
<span class="md-ellipsis">
HTTPS
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#sifrovani-zaloh" class="md-nav__link">
<span class="md-ellipsis">
Šifrování záloh
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#omezeni-pro-hesla" class="md-nav__link">
<span class="md-ellipsis">
Omezení pro hesla
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#izolace-aplikaci-a-sandboxing" class="md-nav__link">
<span class="md-ellipsis">
Izolace aplikací a sandboxing
</span>
</a>
</li>
</ul>
</nav>
</div>
</div>
</div>
<div class="md-content" data-md-component="content">
<article class="md-content__inner md-typeset">
<h1 id="zabezpeceni">Zabezpečení</h1>
<h3 id="turnkey-zabezpeceni">Turnkey zabezpečení</h3>
<p>Zabezpečení je klíčovým prvkem OSCloud. Neustále vydáváme aktualizace, které zpřísňují bezpečnostní politiky firewallu OSCloud, abychom uživatelům nabídli bezpečnost bez nutnosti manuální konfigurace.</p>
<h3 id="ochrana-soukromi-a-kontrola">Ochrana soukromí a kontrola</h3>
<p>OSCloud je navržen tak, aby poskytoval úplnou kontrolu nad daty a jejich vlastnictvím. Veškerý kód a oznámení jsou zpracovány na vašem serveru, a to bez zapojení externích služeb nebo analytik. OSCloud nekontaktuje žádné externí servery a neposkytuje třetím stranám přístup k vašim datům.</p>
<h3 id="https">HTTPS</h3>
<p>Všechny aplikace běžící na OSCloud jsou přístupné pouze přes HTTPS. HTTP požadavky jsou automaticky přesměrovány na HTTPS a OSCloud spravuje SSL certifikáty pomocí Let's Encrypt, včetně jejich automatické obnovy.</p>
<h3 id="sifrovani-zaloh">Šifrování záloh</h3>
<p>Zálohy jsou volitelně šifrovány pomocí AES-256-CBC, což zajišťuje vysokou úroveň ochrany vašich dat při ukládání. To znamená, že i v případě, že by někdo získal přístup k zálohám, bez šifrovacího klíče nejsou data čitelná.</p>
<hr />
<h3 id="omezeni-pro-hesla">Omezení pro hesla</h3>
<ul>
<li><strong>OSCloud</strong> vyžaduje, aby hesla uživatelů obsahovala alespoň 1 velké písmeno, 1 číslici a 1 speciální znak.</li>
<li>Hesla uživatelů musí mít minimálně 8 a maximálně 256 znaků.</li>
<li>Každé heslo je individuálně <strong>saltováno</strong> a hashováno pomocí algoritmu <strong>PBKDF2</strong> (viz <a href="https://www.ietf.org/rfc/rfc2898.txt">RFC 2898, sekce 5.1</a>).</li>
</ul>
<hr />
<h3 id="izolace-aplikaci-a-sandboxing">Izolace aplikací a sandboxing</h3>
<ul>
<li>Aplikace jsou od sebe <strong>zcela izolované</strong>. Jedna aplikace nemůže manipulovat s databází jiných aplikací nebo s jejich místními soubory. Toho dosahujeme pomocí <strong>Linuxových kontejnerů</strong>.</li>
<li>Aplikace běží s <strong>rootfs pouze pro čtení</strong>, což zabraňuje útokům, kdy by bylo možné manipulovat s kódem aplikace.</li>
<li>Aplikace se mohou připojit pouze k doplňkům, jako jsou databáze, LDAP nebo přenos e-mailů, a to <strong>pouze pomocí ověřování</strong>.</li>
<li>Aplikace jsou spouštěny s <strong>profilem AppArmor</strong>, který zakazuje mnoho systémových volání a omezuje přístup k souborovým systémům <strong>proc</strong> a <strong>sys</strong>.</li>
<li>Většina aplikací běží jako uživatel bez oprávnění <strong>root</strong>. V budoucnu plánujeme implementaci uživatelských jmenných prostorů.</li>
<li>Každá aplikace je spuštěna ve své vlastní <strong>subdoméně</strong>, na rozdíl od dílčích cest. To zajišťuje, že zranitelnosti typu <strong>XSS</strong> v jedné aplikaci neohrozí ostatní aplikace.</li>
<li>Procesní kapacity jako <strong>NET_RAW</strong> jsou vypuštěny, což zvyšuje bezpečnost.</li>
</ul>
</article>
</div>
<script>var target=document.getElementById(location.hash.slice(1));target&&target.name&&(target.checked=target.name.startsWith("__tabbed_"))</script>
</div>
</main>
<footer class="md-footer">
<div class="md-footer-meta md-typeset">
<div class="md-footer-meta__inner md-grid">
<div class="md-copyright">
<div class="md-copyright__highlight">
Copyright &copy; 2024 Oscloud CZ
</div>
Made with
<a href="https://squidfunk.github.io/mkdocs-material/" target="_blank" rel="noopener">
Material for MkDocs
</a>
</div>
<div class="md-social">
<a href="https://git.arch-linux.cz/Oscloud" target="_blank" rel="noopener" title="git.arch-linux.cz" class="md-social__link">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><!--! Font Awesome Free 6.6.0 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2024 Fonticons, Inc.--><path d="M216.29 158.39H137C97 147.9 6.51 150.63 6.51 233.18c0 30.09 15 51.23 35 61-25.1 23-37 33.85-37 49.21 0 11 4.47 21.14 17.89 26.81C8.13 383.61 0 393.35 0 411.65c0 32.11 28.05 50.82 101.63 50.82 70.75 0 111.79-26.42 111.79-73.18 0-58.66-45.16-56.5-151.63-63l13.43-21.55c27.27 7.58 118.7 10 118.7-67.89 0-18.7-7.73-31.71-15-41.07l37.41-2.84zm-63.42 241.9c0 32.06-104.89 32.1-104.89 2.43 0-8.14 5.27-15 10.57-21.54 77.71 5.3 94.32 3.37 94.32 19.11m-50.81-134.58c-52.8 0-50.46-71.16 1.2-71.16 49.54 0 50.82 71.16-1.2 71.16m133.3 100.51v-32.1c26.75-3.66 27.24-2 27.24-11V203.61c0-8.5-2.05-7.38-27.24-16.26l4.47-32.92H324v168.71c0 6.51.4 7.32 6.51 8.14l20.73 2.84v32.1zm52.45-244.31c-23.17 0-36.59-13.43-36.59-36.61s13.42-35.77 36.59-35.77c23.58 0 37 12.62 37 35.77s-13.42 36.61-37 36.61M512 350.46c-17.49 8.53-43.1 16.26-66.28 16.26-48.38 0-66.67-19.5-66.67-65.46V194.75c0-5.42 1.05-4.06-31.71-4.06V154.5c35.78-4.07 50-22 54.47-66.27h38.63c0 65.83-1.34 61.81 3.26 61.81H501v40.65h-60.56v97.15c0 6.92-4.92 51.41 60.57 26.84z"/></svg>
</a>
<a href="https://mamutovo.cz/@oscloud" target="_blank" rel="noopener me" title="mamutovo.cz" class="md-social__link">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><!--! Font Awesome Free 6.6.0 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2024 Fonticons, Inc.--><path d="M433 179.11c0-97.2-63.71-125.7-63.71-125.7-62.52-28.7-228.56-28.4-290.48 0 0 0-63.72 28.5-63.72 125.7 0 115.7-6.6 259.4 105.63 289.1 40.51 10.7 75.32 13 103.33 11.4 50.81-2.8 79.32-18.1 79.32-18.1l-1.7-36.9s-36.31 11.4-77.12 10.1c-40.41-1.4-83-4.4-89.63-54a102.5 102.5 0 0 1-.9-13.9c85.63 20.9 158.65 9.1 178.75 6.7 56.12-6.7 105-41.3 111.23-72.9 9.8-49.8 9-121.5 9-121.5m-75.12 125.2h-46.63v-114.2c0-49.7-64-51.6-64 6.9v62.5h-46.33V197c0-58.5-64-56.6-64-6.9v114.2H90.19c0-122.1-5.2-147.9 18.41-175 25.9-28.9 79.82-30.8 103.83 6.1l11.6 19.5 11.6-19.5c24.11-37.1 78.12-34.8 103.83-6.1 23.71 27.3 18.4 53 18.4 175z"/></svg>
</a>
<a href="https://matrix.to/#/!nnrBXdWbSiXkfiYtWR:mxchat.cz?via=mxchat.cz" target="_blank" rel="noopener" title="matrix.to" class="md-social__link">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 640 512"><!--! Font Awesome Free 6.6.0 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2024 Fonticons, Inc.--><path d="M88.2 309.1c9.8-18.3 6.8-40.8-7.5-55.8C59.4 230.9 48 204 48 176c0-63.5 63.8-128 160-128s160 64.5 160 128-63.8 128-160 128c-13.1 0-25.8-1.3-37.8-3.6-10.4-2-21.2-.6-30.7 4.2q-6.15 3.15-12.6 6c-16 7.2-32.9 13.5-49.9 18 2.8-4.6 5.4-9.1 7.9-13.6 1.1-1.9 2.2-3.9 3.2-5.9zM208 352c114.9 0 208-78.8 208-176S322.9 0 208 0 0 78.8 0 176c0 41.8 17.2 80.1 45.9 110.3-.9 1.7-1.9 3.5-2.8 5.1-10.3 18.4-22.3 36.5-36.6 52.1-6.6 7-8.3 17.2-4.6 25.9C5.8 378.3 14.4 384 24 384c43 0 86.5-13.3 122.7-29.7 4.8-2.2 9.6-4.5 14.2-6.8 15.1 3 30.9 4.5 47.1 4.5m224 128c16.2 0 31.9-1.6 47.1-4.5 4.6 2.3 9.4 4.6 14.2 6.8C529.5 498.7 573 512 616 512c9.6 0 18.2-5.7 22-14.5s2-19-4.6-25.9c-14.2-15.6-26.2-33.7-36.6-52.1-.9-1.7-1.9-3.4-2.8-5.1 28.8-30.3 46-68.6 46-110.4 0-94.4-87.9-171.5-198.2-175.8 4.1 15.2 6.2 31.2 6.2 47.8v.6c87.2 6.7 144 67.5 144 127.4 0 28-11.4 54.9-32.7 77.2-14.3 15-17.3 37.6-7.5 55.8 1.1 2 2.2 4 3.2 5.9 2.5 4.5 5.2 9 7.9 13.6-17-4.5-33.9-10.7-49.9-18q-6.45-2.85-12.6-6c-9.5-4.8-20.3-6.2-30.7-4.2-12.1 2.4-24.8 3.6-37.8 3.6-61.7 0-110-26.5-136.8-62.3-16 5.4-32.8 9.4-50 11.8C279 439.8 350 480 432 480"/></svg>
</a>
</div>
</div>
</div>
</footer>
</div>
<div class="md-dialog" data-md-component="dialog">
<div class="md-dialog__inner md-typeset"></div>
</div>
<script id="__config" type="application/json">{"base": "..", "features": ["search.suggest", "navigation.indexes"], "search": "../assets/javascripts/workers/search.6ce7567c.min.js", "translations": {"clipboard.copied": "Copied to clipboard", "clipboard.copy": "Copy to clipboard", "search.result.more.one": "1 more on this page", "search.result.more.other": "# more on this page", "search.result.none": "No matching documents", "search.result.one": "1 matching document", "search.result.other": "# matching documents", "search.result.placeholder": "Type to start searching", "search.result.term.missing": "Missing", "select.version": "Select version"}}</script>
<script src="../assets/javascripts/bundle.525ec568.min.js"></script>
<script src="../javascripts/extra.js"></script>
</body>
</html>
Reference in New Issue Copy Permalink