adelorenzo/talk2me
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
25 Commits 6 Branches 0 Tags 82 MiB
92b7c41f61
Commit Graph

4 Commits

Author SHA1 Message Date
Adolfo Delorenzo
9170198c6c Add comprehensive secrets management system for secure configuration 
- Implement encrypted secrets storage with AES-128 encryption
- Add secret rotation capabilities with scheduling
- Implement comprehensive audit logging for all secret operations
- Create centralized configuration management system
- Add CLI tool for interactive secret management
- Integrate secrets with Flask configuration
- Support environment-specific configurations
- Add integrity verification for stored secrets
- Implement secure key derivation with PBKDF2

Features:
- Encrypted storage in .secrets.json
- Master key protection with file permissions
- Automatic secret rotation scheduling
- Audit trail for compliance
- Migration from environment variables
- Flask CLI integration
- Validation and sanitization

Security improvements:
- No more hardcoded secrets in configuration
- Encrypted storage at rest
- Secure key management
- Access control via authentication
- Comprehensive audit logging
- Integrity verification

CLI commands:
- manage_secrets.py init - Initialize secrets
- manage_secrets.py set/get/delete - Manage secrets
- manage_secrets.py rotate - Rotate secrets
- manage_secrets.py audit - View audit logs
- manage_secrets.py verify - Check integrity

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-06-03 00:24:03 -06:00
Adolfo Delorenzo
d010ae9b74 Remove hardcoded API key - CRITICAL SECURITY FIX 
- Remove hardcoded TTS API key from app.py (major security vulnerability)
- Add python-dotenv support for secure environment variable management
- Create .env.example with configuration template
- Add comprehensive SECURITY.md documentation
- Update README with security configuration instructions
- Add warning when TTS_API_KEY is not configured
- Enhance .gitignore to prevent accidental commits of .env files

BREAKING CHANGE: TTS_API_KEY must now be set via environment variable or .env file

Security measures:
- API keys must be provided via environment variables
- Added dotenv support for local development
- Clear documentation on secure deployment practices
- Multiple .env file patterns in .gitignore

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-06-03 00:06:18 -06:00
Adolfo Delorenzo
05ad940079 Major improvements: TypeScript, animations, notifications, compression, GPU optimization 
- Added TypeScript support with type definitions and build process
- Implemented loading animations and visual feedback
- Added push notifications with user preferences
- Implemented audio compression (50-70% bandwidth reduction)
- Added GPU optimization for Whisper (2-3x faster transcription)
- Support for NVIDIA, AMD (ROCm), and Apple Silicon GPUs
- Removed duplicate JavaScript code (15KB reduction)
- Enhanced .gitignore for Node.js and VAPID keys
- Created documentation for TypeScript and GPU support

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-06-02 21:18:16 -06:00
Adolfo Delorenzo
1ec3ba69c2 second commit 2025-04-04 13:23:58 -06:00