Skip to content

Conversation

joshtrichards
Copy link
Member

@joshtrichards joshtrichards commented Oct 5, 2025

This PR updates and improves the server-side encryption documentation.

  • Adds context about "encryption" to help readers understand Server-Side Encryption (SSE) in relation to other encryption solutions (within Nextcloud and those provided by operating systems, etc.).
  • Improves clarity throughout the documentation.
  • Reorganizes and streamlines content for better readability.
  • Adds additional reference links.
  • Fixes outdated comments and notes.
  • Expands and clarifies information on key management modes and encryption methods.
  • Consolidates encryption troubleshooting entries from the General Troubleshooting chapter, bringing all related troubleshooting content together.

Note: In-depth implementation details remain in the dedicated "Details" chapter, which is not affected by this PR.. Same goes for occ encryption section in the occ command reference chapter.

☑️ Resolves

Follow-up items:

🖼️ Screenshots

(works better if you open the screenshot image in a new tab then clicked on again to view it full-size)

image

Updated the server-side encryption documentation.

- Reorganized and streamlined
- Improved clarity throughout
- Fixed a few outdated comments/notes
- Additional reference links
- Added context of "encryption" to help reader understand SSE in the context of other encryption solutions (both within Nextcloud and provided by their OS/etc)
- Expanded/clarified key management modes and encryption methods a bit

Signed-off-by: Josh <[email protected]>
Added a tip for further encryption command examples and details.

Signed-off-by: Josh <[email protected]>
Moved them all to the Encryption chapter rather than having them split between there and the general troubleshooting chapter.

And cleaned up some grammar and typos.

Signed-off-by: Josh <[email protected]>
@joshtrichards joshtrichards changed the title refactor(admin): Rewrite Server-Side Encryption chapter docs(admin): restructure and update server-side encryption documentation Oct 13, 2025
@Toorero
Copy link

Toorero commented Oct 15, 2025

It would be cool if you could mention that occ:fix-encrypted-version will (most likely) lead to data loss on the corrupted files since it will "just" roll-back to the most recent version that has a valid signature discarding more recent versions with signature errors.

Copy link
Contributor

@alexanderdd alexanderdd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for working on this. Sorry, I don't have time to look at this at the moment.

@joshtrichards
Copy link
Member Author

fix-encrypted-version will (most likely) lead to data loss on the corrupted files since it will "just" roll-back to the most recent version that has a valid signature discarding more recent versions with signature errors.

@Toorero Can you clarify? The "version", in the context of SSE, is the encryption metadata version (not File Versions). The command just tries a bunch of different possible encryption versions. It doesn't touch file content or roll back to any prior file versions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Warn about clear paths with Server Side Encryption (SSE) Improvements for the encryption section

4 participants