Package: keeporgd Version: @VERSION@ Section: net Priority: optional Architecture: @ARCH@ Maintainer: tiredsysadmin Homepage: https://garage.rcmd.space/keeporg Depends: adduser Description: KeePass database synchronization server KeepOrg stores KDBX files as opaque versioned blobs and arbitrates concurrent writes between clients. It hosts many databases, controls access through a tree of user groups, and accepts registrations by invite link or OIDC. . When two clients save at once it can merge both edits in memory, following KeePass's own synchronization rules, so neither is lost. . Merging requires the server to hold the vault's password, which it keeps encrypted under a master key in /etc/keeporg/master.key, created on first start. Back that file up separately from /var/lib/keeporg: whoever holds both can read every merge vault. Databases on any other conflict strategy keep their key off the server entirely. . The service runs as the keeporg user with its data in /var/lib/keeporg and its configuration in /etc/keeporg/server.json. Terminate TLS in front of it with nginx or caddy, or point tls_cert and tls_key at a certificate.