Tauāki Te Ārai

E whakaata ana tēnei Tauākī Āhuatanga i ngā tikanga mahi tūhinga me ngā tikanga whakahaere a Kapsule Group Limited (Kapsule Cloud) e whakatinana ai hei tiaki i ngā raraunga e toea ana i runga i ā mātou papatūmataiti. E whakatupuranga ana i te Data Processing Agreement, ā e whakahou tonutanga ana e whakaatu ai i ngā whakapai ki tā mātou āhuatanga ārai.

Ko ā mātou mātāpono matua he ārai kōpiko: ka whakatōkitoki kami i ngā kaupapa ārai maha, motuhake ake, kia kore ai he putanga kotahi e whakamarara ai i ngā raraunga kaiwhiwhi.

Ka whakatipurangi matou i ngā kaupapa whakamarumaru pāutuutu me te whakaprivacy, ka arotakeina i te iti iho i ia tau, ā, ka whakahoutia ina mea nui nei te panui o te papatuanui, o te āhuatanga whakatupuranga rānei.

Ko te tangata whakahaere Whakaprivacy e mahi ana hei whakakaha whakahaere mo te ture whakamarumaru raraunga. Ka tukua te kawenga whakamarumaru ki ngā tangata motuhake i te tīma pūnaha.

Ka whakatupuranga katoa te kaupapa whakaprivacy me te whakamarumaru i te whakauru tūmatanui, ā, anō anō i ia tau. Ka tūtuki ngā tangata e whakauru ana ki ngā pūnaha whakatupuranga ki ngā rapu whakatepe i te rite i te ture.

Ka tuhi, arotakei, ā, whakamahia ngā kawenga whakatupuranga me ngā kawenga tata-ine hei whakapai i ngā whakahaere i te wā tonu.

Ko te whakatupuranga ki ngā pūnaha mahi tūturu me ngā raraunga a te kaiwhiwhi ka whāngai e ngā whakahaere whakatupuranga ā-matawhānui noa iho e hāngai ana ki ngā maatauranga o te whakatupuranga tae rawa atu: ko ngā kaimahi ka tuku iho ki te whakatupuranga anake e tika ana mo te mahi a rātou ake.

Ko te whakaparipari rua āhuatanga (2FA) e hōatu kau ana mo ngā kaimahi katoa he whakatupuranga ki te hanganga pūnaha mahi tūturu, te paanui whakahaere hononga, te kopu tuhinga, me ngā paanui kaupapa ao.

Ko ngā tika whakatupuranga ka arotakengia i ngā wā e tatau ana me te whakakore tere i te wā o te huringa mahi, te haere ranei. Ko ngā kaupapa whakatupuranga me te whakapiki tika ka tuhituhia.

Ko ngā taiao mahi tūturu me te kore-mahi tūturu ka whakatokona noa iho. Ko ngā taiao a te kaiwhiwhi ka motuhake whakaaro mai i a rātou ake i roto i te papatupu hononga.

Ko te whakatupuranga whakahaere katoa ki ngā pūnaha mahi tūturu ka whakamanahia e ngā tohu kī SSH; ko te whakamanahia ā-pāmamae SSH ka whakatūmatia.

Kua whakatiwtiwaia te katoa o ngā raraunga e rere ana i waenganui i ngā kaihoko me ō mātou papatuanui mā te whakamahi i TLS 1.2 nō reira anake. I tonoa otomāti ngā tohu TLS, ā, ka arotakengia anō i mua i te pau.

Kua whakatiwtiwaia ngā tāpuitanga o waho o te pūnaha mā te whakamahi i restic me AES-256. Kua tohua motuhake ngā kupu whakamutunga tiwtiwai mai i ngā raraunga tāpuitanga, ā, kua tāpuia anō ki tawhiti hāunga. Ko te ngaro o te kupu whakamutunga he kaupapa e kore e taea te whakaora anō i ngā raraunga tāpuitanga, nō reira ka pupuritia ngā kupu whakamutunga i roto i ngā wāhi haumaru maha o tawhiti hāunga.

Kua tohua ngā tāpuitanga whakatiwtiwai i roto i te pūnaha penapena ahanoa Cloudflare R2, rohe Oceania, he āhuatanga e wehe ana i ō mātou papatuanui matua Hetzner.

Kua tohua ngā raraunga papatuanui mataketake (arā, ngā huna, ngā kupu matua API, me ngā tohu tūturu) i roto i ngā pūnaha whakahaere huna motuhake, ā, kāore i te whakatokia ki roto i te punchao pūtaiao, i te whakahaere waihanga rānei e tiakina ana e te whakakore ahumoni.

Kua tiakina ngā ratonga e anga ana ki te kaiwhakapaipai mā Cloudflare's web application firewall (WAF) me te whakatupuranga DDoS, e wetewete ana i ngā whakatupuranga nui me ngā whakatupuranga ahumoni āpiti i mua i tō rātou taenga ki ā mātou pūnaha.

Kua whāiti-whatangi ngā āhuatanga tumuaki kaiwhakapaipai: ka tūturu ia pae i tētahi horopū motuhake ā-kupu ana e kore e taea te whakauru atu ki ngā raraunga o ētahi atu kaiwhakapaipai i te ahumati whatangi.

Kua whakatika i ngā pūnaha Mahi, ngā pūnaha kaupapa, me ngā whakahirahira āpiti nō te tīmatanga e ai ki te āhuatanga mau harikoa. Ka tukuna ngā whakatika haumaru mātotoranga i roto i te 24-72 haora o te tuku tuatahi. Ka titirohia te pūnaha ā-Interneti mo ngā mate haumaru rongonui i ngā wā tonutanga.

Kua whakahōia ngā ture ahi me te ringa hei whakakore i te whakauru ā-roto ki ngā tūmanako rahi ake me ngā ratonga. Kua monokia ngā ratonga tē hiahiatia i te tīmatanga.

Ka mahia ngā whakamatautau wetewete i ngā wā tonutanga e ngā kaiwhakamatau whaikaha motuhake. Ka whakatikaina ngā kitenga mea nui ā, ka whakamatuatua anō.

Ko ngā kaupapa whakauru, ngā huringa whiriwhiri, ngā whakapānga whakamana, me ngā kaupapa pūnaha e pā ana ki te haumaru, e whakataitongaina ana ki te pūnaha whakataitonga nui. Ko ngā whakataitonga e pupuri ana mo te iti iho o te 90 rā.

Ko ngā tohu hauora o te Papawhare me ngā tohu haumaru e aroturukina ana i te 24x7. Ko ngā oioi e arahina ana ki te kaimahi o-rārangi mo te tūhuratanga tūturu.

Ka pupuri ake māua i te mahere urupare tūkeleke whakapapahuatia me ngā taumata raru kua tautuhia, ngā huarahi piki ake, me ngā tikanga whakawhitiwhiti. Ka arotakengia me ka whakamatautauhia te mahere i te iti iho o te kotahi tau.

Ki te pūmau he Whakawhiti Kore Mōrearea Mōhiotanga e pā ana ki te Mōrearea Kaiwhiwhi a te Kaihoko, ka whiwhi whakaohooho ake ā māua i ngā kaihoko e pā ana i roto i te 72 haora mai i te whakawhiti ake, i te mea e hiahiatia ana e te Privacy Act 2020 me te Data Processing Agreement.

Ko Sentry e whakamahia ana mo te whakataitonga hapa tūturu me te aroturuki whaipainga tono puta noa i te pūtake papawhare.

Kua whakaatuatia ngā konae tūmomo a te Kaiwhitiwhiti, ngā pūtauta, me ngā raraunga īmēra i ia rangi ki te Cloudflare R2 (rohe Oceania) mā te whakamahi i restic. Kua whakawhāia ngā tūhononga me te AES-256 i te wā tuturu.

Ko te taupakitanga tūhononga he kaitonutanga 30 rangi i runga i ngā mahere utu katoa. Ko ngā mahere teitei, kua whakakapia ake he kauwhata wiki me nga kauwhata marama. Tirohia te Service Level Agreement mō ngā tuhinga tohu āhuatanga o te mahere.

Kua whakapapaahia ngā tikanga whakaora i roto i ā mātou pukapuka tūmahi o roto me te whakatūtakotia ki te wā. Ko te rōpū pūtauta o Kapsule Cloud e mahi ana i ngā whakaora tutakitaki hei whakamatau i te orite o ngā tūhononga.

Ko te pūtauta pūtauta Kapsule Cloud (tae atu ko te whirihoranga me ngā tuhinga whakarite) i whakaatuatia i ia rangi ki ngā pokapū tūmomo Private GitHub i roto i te kapsulenz organisation, e whakarato ana i te ara whakaora motuhake mō te pūtauta ake.

Ko ngā tikanga whakaora āpitihanga mō ia āhuatanga hanganga pāpūtea (kaupapa mīhini tūmako, pūtauta īmēra, pūtauta pūtea) kua whakapapaahia me ngā taupuranga whakaora tohu o te 2-4 haora e whānui ana i te āhuatanga me te rahi raraunga.

Ka here katoa ngā kaimahi katoa e whai wāhi ana ki ngā raraunga o te kaipūmau i roto i ngā whakataunga haumaru, mā te kirimana rānei mā te ture rānei.

Ka whakarite matua ā mātou i ngā āpitihanga whakahāngai raraunga me ngā kai-mahi tuarua katoa. Ko ēnei āpitihanga e hiahia ana kia whakatutuki ngā kai-mahi tuarua i ngā whakatū haumaru e kore he iti ake i ērā i roto i ā mātou Data Processing Agreement, tae atu ki ngā wakataunga haumaru, te taipitopito haumaru, me ngā whakataunga mahi tūturu.

Ka arotakeina te rārangi kai-mahi tuarua i te iti iho i te ono marama mō te tūranga e tika tonu ana. Ka aromataohia ngā kai-mahi tuarua ā mātou i ngā whakaritenga haumaru tōpū i mua i te whakatunga.

Ko te rārangi o nā kai-mahi tuarua o nāianei ka whakaputaina i kapsulecloud.com/legal/sub-processors.

Ko ngā pūnaha whakahaere ka whakahaere ana i roto i ngā pokapū raraunga Hetzner i Germani. Ko ngā pāwhare a Hetzner he Tier III, he ōrite rānei, ā he mea e whakarato ana: te uru whakamanawa ki te pokapū me te whakamahi maha-āhuatanga i ngā pūtake; kaitiaki pokapū 24x7 ki te pokapū; wawe hiko tuarua (UPS me ngā pūkae diesel); pūnaha whakamatotoru tuarua; te tirotiro ahi me te whakapaekō.

Ko te uru pokapū ki te taputapu pūnaha ka whakatapaia ki te kaitiaki Hetzner noa iho. Karekau he uru noa te hunga mahi Kapsule Cloud ki te taputapu whakahaere; ka mahia katoa ngā uru whakahaere i tawhiti i runga i ngā arowai ārai.

Ko ngā pūmau whakakore kua whakamutu ka mukua noa iho, ka whakangaromia rānei kia kaha, ki runga i ngā mahinga pokapū Hetzner, i mua i te whakamahi anō, te tuku rānei.

Ka whai atu māua i te ā-āhuatanga haumaru whakawhanaketanga pūmanawa. Me whakaae katoa te arotake whakamarama ā-hoa mō ngā āhuatanga tūmahi i mua i te whakatuatuakina. Ka tīmata te raupapa-tūhono hiranga i ia hanga ā-mahi hei tukituki i ngā mataotaotao rongonui kei roto i ngā pūmotu-kaupapa-toru.

Ka whakahaere ngā huna mā te pūnui haumaru huna motuhake. Kāore he tohu-whakaae, API key, āe ki ngā uara whiriwhiri uaua e whakarite ki ngā pūkete pūmanawa.

Kei roto i te whakamātau i mua i te tukutuku: ngā whakamātau mahi, whakamātau hoki-ake, me ngā whakamātau arotake haumaru. Ko ngā āhuatanga ki te whakamarama, utu, āe ki ngā raina whakahaere raraunga, me te nui atu o te arotake.

Ko te whakaemi ā-taupāpori o te tohu-whakaae: kua āhuahutia, kua aukina i ngā tīmatatanga OWASP Top 10 tae atu ki te whakatuatuaka SQL, whiwhinga-pokapū ā-ipurangi, me ngā tono ā-pokapū. Ka whakamahi ngā whakaemi toronui i ngā āhuatanga pūranga SQL injection, cross-site scripting, me cross-site request forgery.

KPanel whakamarama: ko ngā kupuwhare kua whakatoihongia me Argon2id (āhuatanga pariewhare, āhuatanga haumaru ki ngā penapena GPU). Ko ngā kupuwhare hou e whakamatauhia ana i te pūmotu Have I Been Pwned mā te tirotiro whakatupuranga k-anonymity i mua i te whakaae. Ko te urunga tohu e tautokona ana e te whakamarama TOTP-ā-rua-mea, ngā whakawhiti-wā SMS kotahi-tūnga, me ngā passkey ā-taura (WebAuthn/FIDO2). Ko te urunga OAuth e tautokona ana mā Google, GitHub, me Apple Sign In, ia tahi e whakamatautia ana i te tohu-JWKS a te kaiwhakahaere. Ko te urunga hononga-tohu e tenutia ana ki te toru nei tono ia haora ia tohi, ā, e wātea ana hei tikanga whakaora. Ko ngā tohu-ahotanga e whakatūmataiti mā te harikoa tohu, e penapena hurihuri ki te papakupu, ā, e poke ana i muri i te rua tekau mā te tekau rā o te kore-mahi.

Ko ngā raraunga a te Kaihoko ka wehewehea mā ngā kaupapa e whā: te tūhononga, te pūtaonga raraunga, me te papaanga tūmahi. Ka whakamōrearea ngā kōnae, ngā pūtaonga raraunga, me ngā kaute īmēra o ia Kaihoko i raro i ngā kaute pūnaha motuhake me te kore e taea te uru a etahi atu Kaihoko.

I te wā e whakatupuranga ana te Kaihoko i a rātou mahi, ka tukua a te Kaiwhakahaere Raraunga Tūturu hei whakaputu mō te rua tekau mā tahi (30) rā, katahi ka mukua motu iho i ngā pūnaha mahi. Ka puruia ngā kōpī kēkēpāre i te ahunga o te muri, i roto i te toru tekau (30) rā o te mukunga mai i ngā pūnaha motu.

Ko ngā mahinga kua tohua hei whakakore raraunga e whakatuturu kia mukua te raraunga i ngā pūnaha katoa e whaimana ana, tae atu ki ngā pūtaonga raraunga motu, ngā taupunga, me te pūranga tūmahi, ehara i te tuatahi noa iho.

Ko ngā mahinga mō te whakatuturu i ngā tono a te Kaiwhakahaere Raraunga (te uru, te whakatika, te whakakore) kua tohua kua whakatuturu. Ko ngā taputapu whakaputu KPanel ka āhei i ngā Kaihoko kia whiwhi i ā rātou raraunga i ngā wa katoa i a ia wā o te whakamahi i te mahi.

Mēnā he pātai a koe mō ā mātou tikanga kaumātua, arā ki te pūrongo i te ahuatanga kino e matatauhia ana, tēnā hui mai ki a mātou i [email protected].

Kapsule Group Limited, Christchurch, New Zealand.