Commit Graph
2 Commits
Author SHA1 Message Date
mrcharles 96fc21022e config: enable full disk encryption in Debian installer preseed
Configure LUKS2 disk encryption with AES-256-XTS cipher (512-bit key) and Argon2id KDF. Add cryptsetup and pam-pwquality packages. Set secure default passphrase for initial setup.

💘 Generated with Crush

Assisted-by: GLM-4.7 via Crush <crush@charm.land>
2026-01-29 09:59:55 -05:00
mrcharles 925982b0de docs: add comprehensive PRD with mandatory security requirements
Add Product Requirements Document documenting FR-001 (Full Disk Encryption - MANDATORY) and FR-007 (System Hardening - Password Complexity) with NIST SP 800-111, NIST SP 800-53, and NIST SP 800-63B compliance requirements.

💘 Generated with Crush

Assisted-by: GLM-4.7 via Crush <crush@charm.land>
2026-01-29 09:59:15 -05:00