This project has been stalled for now. The Raspberry Pi Zero is way too underpowered for even encrypting data, and connecting multiple hard drives through USB is usually a bad idea due to the worse performance and reliability. I might look into hosting Syncthing in the future though, as it's very lightweight and (from my understanding) if a password is set, encrypts data before it is even sent to the Pi.
Project Status: Early work in progress. web-unlock is still not ready for production (nor development) use.
Yet another Raspberry Pi project, a concept for now (until I get all the needed parts). This repository mainly focuses on the software side.
- Raspberry Pi Zero (or an x86 machine) running Seafile on Docker.
- Data & backup drive unlocking through a web browser. (working on implementation)
- Disk and RAM usage reported using Blinkt. (to implement)
- A separate WiFi network for access outside your home, without proxy services. (RaspAP?)
- LUKS encryption on the data drive.
- Weekly backups of both the data drive and root partition to a separate hard drive.
- All of this in a small package that can be carried in a backpack.
PRs are welcome.
- Raspberry Pi Zero with a USB hub HAT.
- Another USB hub that has support for external power.
- Pi & the 2 hard drives connected to the second USB hub, which is connected to the HAT, which is connected to the Pi (hopefully this will work)
- Pi, USB hub, hard drives and a power supply crammed into a camera case
- Modification of the
web-unlockbinary to intercept the password during unlocking might be possible - HTTPS encryption should be a must when dealing with projects like this (caddy?)
web-unlockcould be added to initramfs so that the root drive is also encrypted.
/portadisk/config/- stores configuration files, mainly for web-unlock.
/portadisk/software/- stores data and configuration files for Seafile and other software that might store sensitive data or isn't needed during the "encrypted" phase (i.e. when the drives weren't unlocked yet)
This guide assumes you have a fresh Raspbian Lite installation already set up with updates installed.
sudo apt install git
git clone https://github.com/foundObjects/zram-swap.git
cd zram-swap && sudo ./install.sh --install
sudo apt purge gitsudo apt-get remove dphys-swapfile
echo "tmpfs /var/tmp tmpfs nodev,nosuid,size=35M 0 0" >> /etc/fstab
echo "tmpfs /tmp tmpfs nodev,nosuid,size=35M 0 0" >> /etc/fstabcurl -sSL https://get.docker.com | sh
sudo apt-get install -y python3 python3-pip libffi-dev libssl-dev python3-dev
sudo pip3 install docker-compose
sudo systemctl enable docker --now- Adjust the values in
software/seafile/docker-compose.ymlto your liking. - Run
docker-compose up