Skip to content

Latest commit

 

History

History
77 lines (53 loc) · 2.33 KB

README.md

File metadata and controls

77 lines (53 loc) · 2.33 KB
Raw

cloudDP

ATAK Plugin for secure datapackage sharing.

The purpose of this plugin is to provide a streamlined method to share datapackages without a TAK Server.

The plugin provides a capability to upload datapackages to the cloud securely with AES.

The uploader specifies their own password which is used to encrypt the datapackage on the server.

This password is never transmitted and resides only in memory to perform the AES encryption/decryption.

The server will respond to the uploader with a unique download code (8 alphanumeric characters) that can be distributed to inteded recipients.

The downloader will need both the password and unique download code to successfully download the datapackage. Once downloaded the DP is ingested automatically.

systemd service /etc/systemd/system/atakcode.service

An example systemd service configuration

[Unit]
Description=atakcode Service
After=network.target
StartLimitIntervalSec=0

[Service]
Type=simple
Restart=always
RestartSec=1
User=nick
ExecStartPre=
ExecStart=python3 /home/user/server.py --bind 127.0.0.1 8000
ExecStartPost
ExecStop=
ExecReload=

[Install]
WantedBy=multi-user.target

ngnix config /etc/nginx/sites-available/hostname

server {

        root /var/www/hostname/html;
        index index.html

        server_name hostname;


        location / {
                client_max_body_size 5M;

                include proxy_params;
                proxy_pass http://127.0.0.1:8000;
        }

    listen [::]:443 ssl ipv6only=on; # managed by Certbot
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/hostname/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/hostname/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}
server {
    if ($host = hostname) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


        listen 80;
        listen [::]:80;

        server_name hostname;
    return 404; # managed by Certbot
}

Note: Replace hostname with your actual fqdn