Start LibreLedger: an encrypted money ledger that stores only ciphertext

LibreLedger is a single-person money ledger. The browser encrypts everything (PBKDF2-HMAC-SHA256 with 250k iterations, then AES-256-GCM), and a small standard-library Python server stores only the resulting {v, salt, iv, ct} blob. Ledger files from the earlier Money Ledger version open unchanged. - On plain http to a LAN or VPN address, where browsers hide Web Crypto, the app switches to vendored @noble/hashes and @noble/ciphers 2.2.0 and says so on the lock screen. tests/crypto-interop.test.mjs shows both paths read each other's files. - The server hands out only the app's own files, sends a self-only CSP, nosniff, frame denial and no-referrer, checks the shape of each blob, refuses cross-site writes and writes atomically. It keeps the last 10 backups plus one per day for 30 days. - The container runs that server from a digest-pinned python alpine image, as an unprivileged user, with its data in /data and a health check on /api/health. Assisted-by: Claude Opus 5 <noreply@anthropic.com>
2026-09-17 01:17:16 +01:00
commit 2cffc3ab07
45 changed files with 11114 additions and 0 deletions
@@ -0,0 +1,103 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+   width="132.2917mm"
+   height="26.434887mm"
+   viewBox="0 0 132.2917 26.434886"
+   version="1.1"
+   id="svg1"
+   inkscape:version="1.4 (86a8ad7, 2024-10-11)"
+   sodipodi:docname="Lloyds wordmark.svg"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg">
+  <sodipodi:namedview
+     id="namedview1"
+     pagecolor="#ffffff"
+     bordercolor="#000000"
+     borderopacity="0.25"
+     inkscape:showpageshadow="2"
+     inkscape:pageopacity="0.0"
+     inkscape:pagecheckerboard="0"
+     inkscape:deskcolor="#d1d1d1"
+     inkscape:document-units="mm"
+     inkscape:zoom="1.9729351"
+     inkscape:cx="211.36023"
+     inkscape:cy="108.72127"
+     inkscape:window-width="1920"
+     inkscape:window-height="1001"
+     inkscape:window-x="-9"
+     inkscape:window-y="-9"
+     inkscape:window-maximized="1"
+     inkscape:current-layer="layer1" />
+  <defs
+     id="defs1" />
+  <g
+     inkscape:label="Layer 1"
+     inkscape:groupmode="layer"
+     id="layer1"
+     transform="translate(6.8759843,19.415936)">
+    <path
+       d="m 83.744561,121.44157 v -12.39095 c 0,-0.69286 -0.162434,-1.4841 -0.40081,-2.47042 h 3.985747 c -0.238377,0.98632 -0.400811,1.77605 -0.400811,2.46891 v 12.03335 h 4.365709 c 1.461739,0 2.38259,-0.0656 3.357027,-0.33525 l -0.98641,3.16328 H 83.343751 c 0.238376,-0.98633 0.40081,-1.77606 0.40081,-2.46892 z"
+       fill="#000000"
+       id="path3"
+       style="stroke-width:0.837289" />
+    <path
+       d="m 96.621145,121.44149 v -12.39096 c 0,-0.69285 -0.162434,-1.48401 -0.40081,-2.46891 h 3.985835 c -0.238464,0.98641 -0.400814,1.77606 -0.400814,2.46891 v 12.03335 h 4.365704 c 1.46174,0 2.38251,-0.0656 3.35703,-0.33525 l -0.9849,3.16336 H 96.220335 c 0.238376,-0.98641 0.40081,-1.77614 0.40081,-2.46899 z"
+       fill="#000000"
+       id="path4"
+       style="stroke-width:0.837289" />
+    <path
+       d="m 107.96022,115.24605 c 0,-4.9498 3.62814,-8.88196 8.84914,-8.88196 5.221,0 8.84897,3.93216 8.84897,8.88196 0,4.94989 -3.62797,8.88197 -8.84897,8.88197 -5.221,0 -8.84914,-3.93208 -8.84914,-8.88197 z m 14.48141,0 c 0,-3.57455 -2.12328,-6.04347 -5.63227,-6.04347 -3.509,0 -5.6322,2.46892 -5.6322,6.04347 0,3.57456 2.1232,6.04356 5.6322,6.04356 3.50899,0 5.63227,-2.469 5.63227,-6.04356 z"
+       fill="#000000"
+       id="path5"
+       style="stroke-width:0.837289" />
+    <path
+       d="m 132.00498,117.49895 c -2.65421,-2.70738 -4.96094,-6.3907 -6.13063,-10.91733 h 3.66146 c 0.0536,0.77926 0.19509,1.49448 0.48731,2.32883 0.83394,2.38259 2.10076,4.37618 3.55178,6.06591 1.49456,-1.61371 2.87022,-3.68332 3.70416,-6.06591 0.29222,-0.83435 0.43372,-1.54806 0.48731,-2.32883 h 3.55261 c -1.15964,4.52814 -3.47642,8.20995 -6.13063,10.91733 v 6.41154 h -3.18337 z"
+       fill="#000000"
+       id="path6"
+       style="stroke-width:0.837289" />
+    <path
+       d="m 143.91542,121.44149 v -12.39096 c 0,-0.69285 -0.16244,-1.48401 -0.40023,-2.46891 h 5.84847 c 5.55625,0 9.06449,3.5522 9.06449,8.66443 0,5.11224 -3.50824,8.66444 -9.06449,8.66444 h -5.84847 c 0.23779,-0.98641 0.40023,-1.77614 0.40023,-2.469 z m 11.29754,-6.2059 c 0,-3.75784 -2.13341,-5.82745 -6.06532,-5.82745 h -2.04801 v 11.67574 h 2.04801 c 3.93191,0 6.06532,-2.0681 6.06532,-5.84829 z"
+       fill="#000000"
+       id="path7"
+       style="stroke-width:0.837289" />
+    <path
+       d="m 160.61598,122.93588 -0.0536,-3.46579 c 2.19872,1.41854 3.67151,2.06819 5.38293,2.06819 1.94921,0 3.19509,-0.76888 3.19509,-2.1561 0,-0.92077 -0.53084,-1.63598 -2.27575,-2.3393 l -2.78315,-1.11603 c -2.56712,-1.02961 -3.71421,-2.44806 -3.71421,-4.66822 0,-3.00084 2.33938,-4.89613 5.94643,-4.89613 1.88473,0 3.66062,0.59598 4.69049,1.0832 v 3.33618 c -1.94921,-1.28892 -3.3793,-1.81935 -4.84121,-1.81935 -1.81943,0 -2.71867,0.71522 -2.71867,1.80888 0,1.09367 0.57354,1.64645 1.93832,2.20969 l 3.49819,1.41854 c 2.03713,0.82247 3.36926,2.30648 3.36926,4.57134 0,2.96811 -2.31846,5.15544 -6.44462,5.15544 -2.16607,0 -4.03908,-0.68247 -5.18784,-1.19204 z"
+       fill="#000000"
+       id="path8"
+       style="stroke-width:0.837289" />
+    <path
+       d="M -6.2795836,3.0215555 V -15.416049 c 0,-1.030962 -0.2416999,-2.208316 -0.5964007,-3.675959 h 5.93074667 c -0.35470227,1.467643 -0.59640227,2.642754 -0.59640227,3.673716 V 2.487199 H 4.954486 c 2.1750512,0 3.5452671,-0.097552 4.9952184,-0.498849 L 8.4819374,6.6952721 H -6.8759843 c 0.3547008,-1.4676427 0.5964007,-2.6427536 0.5964007,-3.6737166 z"
+       fill="#000000"
+       id="path3-4"
+       style="stroke-width:1.24588" />
+    <path
+       d="M 12.880629,3.0214309 V -15.416173 c 0,-1.030963 -0.2417,-2.208192 -0.596401,-3.673718 H 18.2151 c -0.354826,1.467769 -0.596401,2.642755 -0.596401,3.673718 v 17.90549 h 6.496124 c 2.175053,0 3.545142,-0.097552 4.995219,-0.498849 L 27.644517,6.6975147 H 12.284228 c 0.354701,-1.4677673 0.596401,-2.6428783 0.596401,-3.6738412 z"
+       fill="#000000"
+       id="path4-1"
+       style="stroke-width:1.24588" />
+    <path
+       d="m 29.753039,-6.197309 c 0,-7.36525 5.398633,-13.216259 13.16742,-13.216259 7.76879,0 13.167173,5.851009 13.167173,13.216259 0,7.3653738 -5.398383,13.2162599 -13.167173,13.2162599 -7.768787,0 -13.16742,-5.8508861 -13.16742,-13.2162599 z m 21.548184,0 c 0,-5.318897 -3.159418,-8.992614 -8.380764,-8.992614 -5.221343,0 -8.380638,3.673717 -8.380638,8.992614 0,5.31889676 3.159295,8.9927379 8.380638,8.9927379 5.221346,0 8.380764,-3.67384114 8.380764,-8.9927379 z"
+       fill="#000000"
+       id="path5-1"
+       style="stroke-width:1.24588" />
+    <path
+       d="M 65.531377,-2.8450286 C 61.581948,-6.8735709 58.149559,-12.354307 56.409069,-19.089891 h 5.448218 c 0.07974,1.159538 0.290289,2.223767 0.7251,3.465282 1.240894,3.545267 3.125905,6.5116994 5.285009,9.0260031 2.22389,-2.401178 4.270865,-5.4807361 5.511759,-9.0260031 0.434811,-1.241515 0.645364,-2.3035 0.7251,-3.465282 h 5.286254 c -1.725539,6.737826 -5.17288,12.2163201 -9.122309,16.2448624 v 9.5403007 h -4.736823 z"
+       fill="#000000"
+       id="path6-3"
+       style="stroke-width:1.24588" />
+    <path
+       d="M 83.253973,3.0214309 V -15.416173 c 0,-1.030963 -0.2417,-2.208192 -0.595528,-3.673718 h 8.702448 c 8.267638,0 13.487857,5.285633 13.487857,12.892582 0,7.6069492 -5.220219,12.8925811 -13.487857,12.8925811 h -8.702448 c 0.353828,-1.4677673 0.595528,-2.6428782 0.595528,-3.6738412 z m 16.810617,-9.2343133 c 0,-5.5916186 -3.174497,-8.6711766 -9.025134,-8.6711766 H 87.992042 V 2.489317 h 3.047414 c 5.850637,0 9.025134,-3.07731535 9.025134,-8.7021994 z"
+       fill="#000000"
+       id="path7-8"
+       style="stroke-width:1.24588" />
+    <path
+       d="m 108.10423,5.2450716 -0.0797,-5.15705731 c 3.27167,2.11076431 5.46317,3.07744001 8.00974,3.07744001 2.9004,0 4.75427,-1.1440886 4.75427,-3.20825699 0,-1.37009061 -0.78989,-2.43431851 -3.3863,-3.48085491 l -4.14129,-1.6606291 c -3.81986,-1.5320545 -5.52671,-3.6426941 -5.52671,-6.9462613 0,-4.465222 3.48098,-7.285388 8.84822,-7.285388 2.80447,0 5.44697,0.886815 6.97941,1.611791 v 4.964195 c -2.90041,-1.917902 -5.02837,-2.707164 -7.20367,-2.707164 -2.70729,0 -4.04536,1.064227 -4.04536,2.691591 0,1.627364 0.85343,2.449892 2.8842,3.287993 l 5.20528,2.1107643 c 3.03122,1.2238247 5.0134,3.4320166 5.0134,6.8021129 0,4.4165082 -3.44983,7.6712364 -9.58951,7.6712364 -3.22308,0 -6.01011,-1.015514 -7.71945,-1.7737546 z"
+       fill="#000000"
+       id="path8-7"
+       style="stroke-width:1.24588" />
+  </g>
+</svg>