Merge branch 'master' of github.com:snowkidind/snowpass

README.md

@@ -1,5 +1,7 @@
 # Snowpass
 
+## Self custodial password manager written in pure JS 
+
 If you are sick of using third parties for password management this may be a solution that is right for you. Signal messenger is an end to end strongly encrypted messenger application. Its been integrated by large platforms like whatsapp and telegram in order to give its users a secure experience. SnowPass leans on this technology to deliver user credentials to any device across platforms. The software can be installed on any personal device like a raspberry pi, an odroid or your laptop to create a safe zone for your passwords, free from dependence on third parties. 
 
 After setting the system up, you interact with it directly on a chat message on the signal messenger app. You can make new entries, add notes to existing entries, change and update passwords and more. On the backend the password file is encrypted in a safe manner, using the latest strong encryption methods for safe storage. The disappearing message feature of signal messenger automatically removes password requests thereby eliminating any correspondence with the app after a set period of time.

TODO.md

@@ -0,0 +1,10 @@
+Things to build:
+
+key regeneration ceremony
+
+  The current software does not allow for a new encryption key to be issued. There should be a process to issuing this which includes migrating the existing data.enc file. It should also have a feature to remove all backups that use the previous encryption key.
+
+command to erase the key 
+
+  In Signal, you can set the encryption key, but you cannot erase the key. This would be a useful command to issue should you have to surrender your phone for repairs etc.
+

monitor.js

@@ -51,7 +51,7 @@ const { timeFmtDb, dateNowBKK } = dateutils
 
       // handle backups
       const backup = async () => {
-        setTimeout(backup, process.env.BACKUP_CRON * 60 * 60 * 1000)
+        setTimeout(backup, (Number(process.env.BACKUP_CRON) || 24) * 60 * 60 * 1000)
         await pwSkills.manualBackup()
       }
       backup()
@@ -65,7 +65,7 @@ const { timeFmtDb, dateNowBKK } = dateutils
       // requests to detect server down condition
       const checkIn = async () => {
         if (typeof process.env.CHECK_IN_URL !== 'undefined') {
-          setTimeout(checkIn, process.env.CHECK_IN_MIN * 60 * 1000)
+          setTimeout(checkIn, Number(process.env.CHECK_IN_MIN) * 60 * 1000)
           await axios.get(process.env.CHECK_IN_URL)
             .catch((error) => {
               if (error.response) console.log(error.response.data)