From 2d3b1fd8239d0f4ffe723075659e286bebda09ad Mon Sep 17 00:00:00 2001 From: MacRimi Date: Wed, 8 Jul 2026 19:40:54 +0200 Subject: [PATCH] docs(glossary): drop stale /root/pbs-key.recovery-*.enc mention MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The recovery envelope no longer lands in /root/ — code was cleaned up earlier this cycle to keep the keyfile and its envelope exclusively at /usr/local/share/proxmenux/. The glossary entries for "Recovery envelope" (EN) / "Sobre de recuperación" (ES) still described the /root/ mirror as an "offsite backup" / "respaldo local", which is now inaccurate. Removes the trailing sentence from both entries. --- web/messages/en/docs/backup-restore/glossary.json | 2 +- web/messages/es/docs/backup-restore/glossary.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/web/messages/en/docs/backup-restore/glossary.json b/web/messages/en/docs/backup-restore/glossary.json index d2d21639..831d941d 100644 --- a/web/messages/en/docs/backup-restore/glossary.json +++ b/web/messages/en/docs/backup-restore/glossary.json @@ -38,7 +38,7 @@ { "id": "sobre-recuperacion", "term": "Recovery envelope", - "def": "The keyfile wrapped in an extra layer: it is encrypted with the recovery passphrase using AES-256-CBC and PBKDF2 before it ever leaves the host. It is what gets uploaded to PBS as the -keyrecovery group and what is also written to /root/pbs-key.recovery-HOSTNAME-DATE.enc as an offsite backup. Without the passphrase, the envelope is opaque: downloading it from PBS does not reveal the keyfile." + "def": "The keyfile wrapped in an extra layer: it is encrypted with the recovery passphrase using AES-256-CBC and PBKDF2 before it ever leaves the host. It is what gets uploaded to PBS as the -keyrecovery group. Without the passphrase, the envelope is opaque: downloading it from PBS does not reveal the keyfile." }, { "id": "cifrado-cliente", diff --git a/web/messages/es/docs/backup-restore/glossary.json b/web/messages/es/docs/backup-restore/glossary.json index 7bfb1fd7..3a209fb3 100644 --- a/web/messages/es/docs/backup-restore/glossary.json +++ b/web/messages/es/docs/backup-restore/glossary.json @@ -42,7 +42,7 @@ "id": "sobre-recuperacion", "term": "Sobre de recuperación", "also": "recovery envelope, escrow blob, pbs-key.recovery.enc", - "def": "La propia clave de cifrado envuelta en una capa adicional: se cifra con la passphrase de recuperación mediante AES-256-CBC y PBKDF2 antes de salir del host. Es lo que se sube a PBS en el grupo -keyrecovery y lo que se guarda además en /root/pbs-key.recovery-HOSTNAME-FECHA.enc como respaldo local. Sin la passphrase, el sobre es opaco: descargarlo desde PBS no revela la clave." + "def": "La propia clave de cifrado envuelta en una capa adicional: se cifra con la passphrase de recuperación mediante AES-256-CBC y PBKDF2 antes de salir del host. Es lo que se sube a PBS en el grupo -keyrecovery. Sin la passphrase, el sobre es opaco: descargarlo desde PBS no revela la clave." }, { "id": "cifrado-cliente",