Skip to content

RTS-61: require disk encryption and 2FA App #142

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
zyzniewski-reef wants to merge 2 commits into
base: master
Choose a base branch
from
Open

RTS-61: require disk encryption and 2FA App #142

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
db7fde8
RTS-61: require disk encryption and 2FA App
zyzniewski-reef Aug 6, 2025
075b447
RTS-61: more security guidelines
zyzniewski-reef Aug 14, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -108,6 +108,7 @@ If you plan to connect your mobile device to any work-related accounts, first ma

2FA is mandatory everywhere it is possible to use it (more explanation below).
We recommend Twilio's [Authy](https://authy.com/) because it has a PIN code and end-to-end encrypted cloud backup.
We require using an Authenticator App - email-based 2FA is forbidden.

Frequently Asked Questions:

Expand Down
4 changes: 2 additions & 2 deletions docs/Developer_environment_setup.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ This guide will show how to set up a standard, secure work environment for softw

## Ensure you have a Secure Work Environment

For Secure Work Environment we recommend a Virtual Machine or dual-boot with [Full Disk Encryption](Storage_Encryption.md#full-disk-encryption) enabled.
For Secure Work Environment we require a Virtual Machine or dual-boot with [Full Disk Encryption](Storage_Encryption.md#full-disk-encryption) enabled.
This ensures a clear segregation between your professional and personal digital spaces, preventing accidental cross-access or data leaks involving customer data.

If you have previously used your reef.pl email address (or any associated) on a personal environment, make sure to remove it from all devices and accounts.
Expand All @@ -16,7 +16,7 @@ Solely encrypting the home directory would leave these sensitive data vulnerable
Lastly, Docker containers, which store and run client code, are to be considered secret.
Accessing these containers from personal environments is prohibited to maintain a robust security structure, preventing any potential cross-access and preserving the integrity of our client's data.

As for personal/work separation, we recommend using a separate machine (Virtual or physical) or dual-booting.
As for personal/work separation, we require using a separate machine (Virtual or physical) or dual-booting.
It is not recommended, but you may use multi-user setup to isolate personal and work-related applications, but take special care as it is hard to prevent personal accounts, with for example, `docker` access from accessing ANY other account on the system.

# System setup
Expand Down