API Documentation¶

Base URL: hostname:8000/cryptops/v0

Encryption:

GET /encryption

Returns the status of the encryption (whether or not you have an encrypted partition)

POST /encryption/init

Encrypts the disk with a password if there are no encrypted disks

Post data: {"password": password}

POST /encryption/unlock

Decrypts the disk using a password and boots the machine

Post data: {"password": password}

POST /encryption/remove

Brings the VPS in a state where the disk is not encrypted and booting does not require a password (does not change the initrd to a “regular” initrd)

Post data: {"password": password}

POST /encryption/selfdestruct

Removes the encryption master key, effectively deleting the encrypted data permanently.

Encryption keys:

GET /encryption/keys

List luks password slots

POST /encryption/keys/

Add a new password to a new Luks slot.

Post data: {"password": password, "new-password": new-password}

PUT /encryption/keys/{slot-id}

Change a luks slot’s password. {slot} corresponds to a slot id listed by GET /encryption/keys.

Post data: {"password": password, "new-password": new-password}

DELETE /encryption/keys/{slot-id}

Delete a password from a luks slot

SSH keys with access to the initrd:

GET /ssh/keys

List SSH keys in the /root/.ssh/authorized_keys file

POST/ssh/keys

Add a key to the authorized_keys file

Post data: {"ssh-key": ssh-key}

PUT /ssh/keys/{key-id}

Change a key in the authorized_keys file

Post data: {"ssh-key": ssh-key}

DELETE /ssh/keys/{key-id}

Delete the key with id {key-id} from the authorized_keys file

Cryptops