Tauākī Haumaru

E whakaata ana tēnei Tauākī Āhuatanga i ngā tikanga mahi tūhinga me ngā tikanga whakahaere a Kapsule Group Limited (KapsuleHost) e whakatinana ai hei tiaki i ngā raraunga e toea ana i runga i ā mātou papatūmataiti. E whakatupuranga ana i te Data Processing Agreement, ā e whakahou tonutanga ana e whakaatu ai i ngā whakapai ki tā mātou āhuatanga ārai.

Ko ā mātou mātāpono matua he ārai kōpiko: ka whakatōkitoki kami i ngā kaupapa ārai maha, motuhake ake, kia kore ai he putanga kotahi e whakamarara ai i ngā raraunga kaiwhiwhi.

Ka whakatipurangi matou i ngā kaupapa whakamarumaru pāutuutu me te whakaprivacy, ka arotakeina i te iti iho i ia tau, ā, ka whakahoutia ina mea nui nei te panui o te papatuanui, o te āhuatanga whakatupuranga rānei.

Ko te tangata whakahaere Whakaprivacy e mahi ana hei whakakaha whakahaere mo te ture whakamarumaru raraunga. Ka tukua te kawenga whakamarumaru ki ngā tangata motuhake i te tīma pūnaha.

Ka whakatupuranga katoa te kaupapa whakaprivacy me te whakamarumaru i te whakauru tūmatanui, ā, anō anō i ia tau. Ka tūtuki ngā tangata e whakauru ana ki ngā pūnaha whakatupuranga ki ngā rapu whakatepe i te rite i te ture.

Ka tuhi, arotakei, ā, whakamahia ngā kawenga whakatupuranga me ngā kawenga tata-ine hei whakapai i ngā whakahaere i te wā tonu.

Ko te whakatupuranga ki ngā pūnaha mahi tūturu me ngā raraunga a te kaiwhiwhi ka whāngai e ngā whakahaere whakatupuranga ā-matawhānui noa iho e hāngai ana ki ngā maatauranga o te whakatupuranga tae rawa atu: ko ngā kaimahi ka tuku iho ki te whakatupuranga anake e tika ana mo te mahi a rātou ake.

Ko te whakaparipari rua āhuatanga (2FA) e hōatu kau ana mo ngā kaimahi katoa he whakatupuranga ki te hanganga pūnaha mahi tūturu, te paanui whakahaere hononga, te kopu tuhinga, me ngā paanui kaupapa ao.

Ko ngā tika whakatupuranga ka arotakengia i ngā wā e tatau ana me te whakakore tere i te wā o te huringa mahi, te haere ranei. Ko ngā kaupapa whakatupuranga me te whakapiki tika ka tuhituhia.

Ko ngā taiao mahi tūturu me te kore-mahi tūturu ka whakatokona noa iho. Ko ngā taiao a te kaiwhiwhi ka motuhake whakaaro mai i a rātou ake i roto i te papatupu hononga.

Ko te whakatupuranga whakahaere katoa ki ngā pūnaha mahi tūturu ka whakamanahia e ngā tohu kī SSH; ko te whakamanahia ā-pāmamae SSH ka whakatūmatia.

Kua whakatiwtiwaia te katoa o ngā raraunga e rere ana i waenganui i ngā kaihoko me ō mātou papatuanui mā te whakamahi i TLS 1.2 nō reira anake. I tonoa otomāti ngā tohu TLS, ā, ka arotakengia anō i mua i te pau.

Kua whakatiwtiwaia ngā tāpuitanga o waho o te pūnaha mā te whakamahi i restic me AES-256. Kua tohua motuhake ngā kupu whakamutunga tiwtiwai mai i ngā raraunga tāpuitanga, ā, kua tāpuia anō ki tawhiti hāunga. Ko te ngaro o te kupu whakamutunga he kaupapa e kore e taea te whakaora anō i ngā raraunga tāpuitanga, nō reira ka pupuritia ngā kupu whakamutunga i roto i ngā wāhi haumaru maha o tawhiti hāunga.

Kua tohua ngā tāpuitanga whakatiwtiwai i tētahi kaiwhakarato penapena ahanoa motuhake, rohe Oceania, he āhuatanga e wehe ana i ō mātou papatuanui matua whakauru.

Ko ngā huna pūmanawa, ngā kupu matua API, me ngā tohu tūturu ka tohua ki ngā kōnae whakatupuranga whāiti i runga i ngā pūmanawa e whakamahi ana i a rātou, e uru noa ai te pūkete ratonga e hiahia ana ki a rātou, ā, kāore rawa e whakaurua ki roto i te waehere pūtake, e tohua rānei ki te whakahaere putanga. Ko ngā huna hanganga me te tāpuitanga ka tiakina anō mā te whakamahi i te SOPS me te whakamunatanga age.

Ko ia pae whakatupuranga, tae atu ki tō mātou paetukutuku hokohoko, te paanui whakahaere kiritaki, tā mātou API, me ngā pae kiritaki e whakahaerehia ana e mātou, kua tiakina e tētahi web application firewall (ModSecurity me te OWASP Core Rule Set) e rere ana i runga i ā mātou anga ake. Kua tiakina tāpiri tō mātou paetukutuku hokohoko e tētahi web application firewall i te tapa o tā mātou CDN, e rere ana i te aratau aukati. Ka hipoki te tiaki-tapa i ngā pae kiritaki e whakahaerehia ana e mātou, e tukuna ana mā tā mātou CDN. Kāore tēnei tiaki e toro atu ki te paanui whakahaere kiritaki, ki tā mātou API rānei.

Kua wehe ngā pae kiritaki i a rātou anō me ngā ratonga pūnaha noa i te taumata whatunga, ehara i te mea mā ngā pūkete pūnaha kōnae me ngā tukanga motuhake anake. Ko ngā ture ahi-ā-roro taumata-kernel (nftables), e here ana ki te pūkete pūnaha ake o ia tukanga, kaua ki te arorau taupānga, e ārai ana i ia tukanga ehara i te whakahaere, tae atu ki te waehere taupānga ake o ia pae kiritaki, kia kore e taea te whakapā atu ki te tauranga pātengi raraunga noa, ki te tauranga tūmau taupānga ake rānei o tētahi atu pae. Kua whakamanahia tēnei mā te whakamātau tūhono pono mai i roto i te horopaki whakahaere ora o tētahi pae, i ngā ahunga e rua: kua ārai mō tētahi tukanga pae māori, kua whakaaetia mō te whakahaere pūnaha. E ārai ana anō taua tukanga i te uru ehara-i-te-whakahaere ki ngā mutunga ratonga tuapapa kapua ā-roto e kore rawa e tika kia tae atu tētahi tukanga pae. Kāore anō i toro atu ki ia ratonga noa: ko te ratonga penapena noa a te pūnaha kua tiakina e ngā mana whakaatu ā-pae kua here ki ngā raraunga ake o taua pae, engari kāore anō i ārai anō i te taumata whatunga pēnei i te tauranga pātengi raraunga me te tauranga tūmau taupānga; ko te whakawhānui i taua ārai ahi ki tēnei ratonga tētahi whakapainga kua whakamahere i roto i tā mātou hōtaka haumarutanga.

Kua whakatika i ngā pūnaha Mahi, ngā pūnaha kaupapa, me ngā whakahirahira āpiti nō te tīmatanga e ai ki te āhuatanga mau harikoa. Ka whakatinanahia aunoatia ngā whakahoutanga haumarutanga mā roto i te unattended-upgrades, ā, i roto pea i te kotahi rā i muri i te tukunga. Mō ngā papatono haumarutanga tino nui, tae atu ki ērā e hiahia ana ki tētahi whakaurunga ā-ringa pēnei i te tīmata anō, ā kāore anō kia wātea mā ngā whakahoutanga aunoa, ko tā mātou paerewa here motuhake he 7 rā mai i te tukunga. Ka titirohia te pūnaha ā-Interneti mo ngā mate haumaru rongonui i ngā wā tonutanga.

Kua whakahōia ngā ture ahi me te ringa hei whakakore i te whakauru ā-roto ki ngā tūmanako rahi ake me ngā ratonga. Kua monokia ngā ratonga tē hiahiatia i te tīmatanga.

Ka mahia ngā whakamatautau wetewete i ngā wā tonutanga e ngā kaiwhakamatau whaikaha motuhake. Ka whakatikaina ngā kitenga mea nui ā, ka whakamatuatua anō.

Ko ngā ngana whakamana, ngā huringa pūkete me te whirihoranga, me ngā mahi a ō mātou ake kaimahi ki runga i ngā pūkete kiritaki, ka tuhia ki roto i tētahi rehita arotake pātengi raraunga kua whakaraupapatia, kāore e taea te whakarerekē, ā, ka pupurihia mō te iti rawa o te 90 rā. Ko ngā rārangi mō te hanganga me te pūnaha (rārangi tūmau tukutuku, ārai ahi, me te pūnaha whakahaere) ka pupurihia ā-rohe i runga i ia tūmau whakaputa, ā, ko ngā kaimahi whai mana anake e whai wāhi atu, ā, ka tukuna anō hoki ia haora ki tētahi rokiroki motuhake, tuhi-kotahi, i waho o te pae, e mau ana he raka pupuri mō te 90 rā: ka oti te tuhi i tētahi kohinga rārangi, kāore e taea e tētahi tangata, tae atu ki a mātou, te whakakore, te tuhi anō rānei i roto i taua wā, nā reira kāore e taea e tētahi tūmau kua whakaraerae te whakakore i ngā taunakitanga o ngā mea i pā ki reira.

Ko ngā tohu hauora o te Papawhare me ngā tohu haumaru e aroturukina ana i te 24x7. Ko ngā oioi e arahina ana ki te kaimahi o-rārangi mo te tūhuratanga tūturu.

Ka pupuri ake māua i te mahere urupare tūkeleke whakapapahuatia me ngā taumata raru kua tautuhia, ngā huarahi piki ake, me ngā tikanga whakawhitiwhiti. Ka arotakengia me ka whakamatautauhia te mahere i te iti iho o te kotahi tau.

Ki te pūmau he Whakawhiti Kore Mōrearea Mōhiotanga e pā ana ki te Mōrearea Kaiwhiwhi a te Kaihoko, ka whiwhi whakaohooho ake ā māua i ngā kaihoko e pā ana i roto i te 72 haora mai i te whakawhiti ake, i te mea e hiahiatia ana e te Privacy Act 2020 me te Data Processing Agreement.

Ko Sentry e whakamahia ana mo te whakataitonga hapa tūturu me te aroturuki whaipainga tono puta noa i te pūtake papawhare.

Kua whakaatuatia ngā konae tūmomo a te Kaiwhitiwhiti, ngā pūtauta, me ngā raraunga īmēra i ia rangi ki te penapena ahanoa a tawhāiti (rohe Oceania) mā te whakamahi i restic. Kua whakawhāia ngā tūhononga me te AES-256 i te wā tuturu.

Ko te taupakitanga tūhononga he kaitonutanga 30 rangi i runga i ngā mahere utu katoa. Ko ngā mahere teitei, ka pupuritia ngā tuunga tuuruatanga mō te roanga ake o te wā: 90 rā, 1 tau, 7 tau rānei, kei runga i te taumata i hokona. Tirohia te Service Level Agreement mō ngā tuhinga tohu āhuatanga o te mahere.

Kua whakapapaahia ngā tikanga whakaora i roto i ā mātou pukapuka tūmahi o roto me te whakatūtakotia ki te wā. Ko te rōpū pūtauta o KapsuleHost e mahi ana i ngā whakaora tutakitaki hei whakamatau i te orite o ngā tūhononga.

Ko te pūtauta pūtauta KapsuleHost (tae atu ko te whirihoranga me ngā tuhinga whakarite) i whakaatuatia i ia rangi ki ngā pokapū tūmomo Private GitHub i roto i te kapsulenz organisation, e whakarato ana i te ara whakaora motuhake mō te pūtauta ake.

Kua whakapapaahia ngā tikanga whakaora āpitihanga mō ia āhuatanga hanganga pāpūtea me tētahi taupuranga whakaora tohu e hāngai pū ana ki taua āhuatanga: tae atu ki te 8 haora mō te kaupapa mīhini tūmako, e whakawhirinaki ana ki te rahi o ngā raraunga kiritaki e whakahokia ana; 2 ki te 4 haora mō te pūtauta īmēra; ā, 4 haora mō te pūtauta pūtea.

Ka here katoa ngā kaimahi katoa e whai wāhi ana ki ngā raraunga o te kaipūmau i roto i ngā whakataunga haumaru, mā te kirimana rānei mā te ture rānei.

Ka whakarite matua ā mātou i ngā āpitihanga whakahāngai raraunga me ngā kai-mahi tuarua katoa. Ko ēnei āpitihanga e hiahia ana kia whakatutuki ngā kai-mahi tuarua i ngā whakatū haumaru e kore he iti ake i ērā i roto i ā mātou Data Processing Agreement, tae atu ki ngā wakataunga haumaru, te taipitopito haumaru, me ngā whakataunga mahi tūturu.

Ka arotakeina te rārangi kai-mahi tuarua i te iti iho i te ono marama mō te tūranga e tika tonu ana. Ka aromataohia ngā kai-mahi tuarua ā mātou i ngā whakaritenga haumaru tōpū i mua i te whakatunga.

Ko te rārangi o nā kai-mahi tuarua o nāianei ka whakaputaina i kapsulehost.com/legal/sub-processors.

Ka whakahaerehia ngā tūmau whakaputa i roto i ngā pokapū raraunga a te hunga tuatoru. Kāore mātou e whai, e whakahaere rānei i tētahi pokapū raraunga, nō reira ko te haumarutanga ā-tinana, ko ngā mana whakahaere taiao, ko te hiko taapiri, me te patu ahi, kei runga i te kaiwhakahaere o te whare aua kawenga, ā, ko ā mātou whakaaetanga ki ngā kaituhi-tuarua hanganga e whakahau ana kia kaua ngā whakamarumaru e iti iho i ērā kei roto i tā mātou Data Processing Agreement. Kāore mātou e whakaputa i te whenua o ia tūmau whakaputa takitahi: ka neke tō mātou kaha i a mātou e tāpiri ana i ngā rohe, ā, ko tētahi wāhi kua whakaputaina i tētahi wā, ka hē i te rā ka huri, ahakoa kāore he tangata i whakatika i tērā. Ko ngā kaituhi-tuarua ka mahi mātou, kua rārangihia ki kapsulehost.com/legal/sub-processors.

Ko te uru pokapū ki te taputapu pūnaha ka whakatapaia ki te kaitiaki pokapū raraunga noa iho. Karekau he uru noa te hunga mahi KapsuleHost ki te taputapu whakahaere; ka mahia katoa ngā uru whakahaere i tawhiti i runga i ngā arowai ārai.

Ko ngā pūmau whakakore kua whakamutu ka mukua noa iho, ka whakangaromia rānei kia kaha, ki runga i ngā mahinga a te kaiwhakahaere pokapū raraunga, i mua i te whakamahi anō, te tuku rānei.

Ko ngā huna pūmanawa, ngā kupu matua API, me ngā uara whirihoranga tūpato ka tohua ki ngā kōnae whakatupuranga whāiti i runga i ngā pūmanawa e whakamahi ana i a rātou, ā, kāore rawa e tohua ki ngā pūkete waehere pūtake. Ko ngā huna hanganga me te tāpuitanga ka whakahaeretia motuhia mā te whakamahi i te SOPS me te whakamunatanga age.

Kei roto i te whakamātau i mua i te tukutuku: ngā whakamātau mahi, whakamātau hoki-ake, me ngā whakamātau arotake haumaru. Ko ngā āhuatanga ki te whakamarama, utu, āe ki ngā raina whakahaere raraunga, me te nui atu o te arotake.

Ko te whakaemi ā-taupāpori o te tohu-whakaae: kua āhuahutia, kua aukina i ngā tīmatatanga OWASP Top 10 tae atu ki te whakatuatuaka SQL, whiwhinga-pokapū ā-ipurangi, me ngā tono ā-pokapū. Ka whakamahi ngā whakaemi toronui i ngā āhuatanga pūranga SQL injection, cross-site scripting, me cross-site request forgery.

KPanel Authentication: Ko ng kupuiti ka ponamataotao me te Argon2id (mahinga-hoamahi, e whakaiti ana ki te hē GPU). Ko ng kupuiti hou ka tirotiro atu i te Have I Been Pwned pokapū ma te mahi raupapa k-anonymity i mua i te whakaae. Ko te uru-ā-tuatahi e tautoko ana i te whakaōrite TOTP-honui rua-ahuatanga, ko te SMS-kotahi-wā kohi, me ng taputapu passkeys (WebAuthn/FIDO2). Ko te OAuth uru-ā-tuatahi e tautoko ana ma te Google, GitHub, Apple Sign In, me Discord. Ko te Google me te Apple Sign In ka whakamatauhia atu i te JWKS waahi tuatahi a te kaihokohoko; Ko GitHub me Discord e kore e whakaputa JWKS waahi mō te OAuth uru-ā-tuatahi, no reira ko aua rua ka whakamatauhia ma te karanga atu ki te API kaupapa kaihokohoko anō me te tohu ā-uru e tonoa ana. Ko ng whakamatautau uru-ā-tuatahi ka whakatapaetahi i ia wāhitau IP, a ko nga whakamatautau pākurikuri kau ana i te kaute kotahi ka ponokia mo te wā. Ko ng tohu konae ka āhuatanga toitoitanga me te hainatanga toitoitanga, a ka pau i muri i te 30 ra o te kore-āhuatanga.

Ka wehea ā-arorau ngā raraunga a ngā kiritaki i ngā papanga manaaki, pātengi raraunga, me te taupānga. Ka wehea ngā kōnae me ngā pātengi raraunga o ia kiritaki i raro i ngā kaute pūnaha motuhake, ā, kāore he urunga i waenga i ngā kiritaki.

Ka wehea, ka tiakina hoki te īmēra mā ōna ake tikanga. He kaute motuhake ia pouaka īmēra, kua wehea e ngā mana urunga o tō mātou tūmau īmēra, ā, ka takiuru mā ōna ake taipitopito tuakiri. Ko TLS 1.2 me TLS 1.3 anake ka whakaaetia e ō mātou tūmau īmēra: ka whakakāhoretia a TLS 1.0 me 1.1 i ia tauranga īmēra, mā IPv4, mā IPv6 hoki. Kāore rawa mātou e tuku i te IMAP, i te POP3 rānei kāore i whakamunatia, ā, kāore he momo takiuru e tukuna i mua i te whakamunatanga o tētahi hononga. Kāore rawa te tauranga īmēra i waenga tūmau e tuku i te takiuru. Mēnā e rima ngā takiuru i rahua i roto i ngā meneti e rima, ka aukatia te wāhitau IP e hono mai ana mō te haora kotahi, ā, ka aukati motuhake anō te tūmau īmēra i ngā wāhitau IP e puta mai ai ngā hononga tūkino auau. Ka penapenatia ngā raraunga pouaka īmēra ki ngā rōrahi kua whakamunatia (AES-256-XTS), ā, kua whakamunatia hoki ngā tāruarua īmēra. Ka whiwhi ia rohe e manaaki ana mātou i tōna īmēra i ōna ake kī waitohu DKIM, i te RSA me te Ed25519, me tētahi pūkete SPF. Ka whakaputaina e tō mātou ake rohe, e kapsulehost.com, tētahi kaupapahere DMARC o reject me tētahi kaupapahere SPF ka mutu ki te -all, kia whakakāhoretia e ngā tūmau whiwhi e arowhai ana i te DMARC te īmēra e tinihanga ana i taua rohe. Ka whakaputaina hoki e ia tētahi kaupapahere MTA-STS e whakamanahia ana, me ngā pūrongo TLS, e tohutohu ana i ngā tūmau tuku kia tukuna mai te īmēra ki a mātou mā tētahi hononga kua whakamunatia anake ki tētahi tiwhikete kua manatokona.

I te wā e whakatupuranga ana te Kaihoko i a rātou mahi, ka tukua a te Kaiwhakahaere Raraunga Tūturu hei whakaputu mō te rua tekau mā tahi (30) rā, katahi ka mukua motu iho i ngā pūnaha mahi. Ka puruia ngā kōpī kēkēpāre i te ahunga o te muri, i roto i te toru tekau (30) rā o te mukunga mai i ngā pūnaha motu.

Ko ngā mahinga kua tohua hei whakakore raraunga e whakatuturu kia mukua te raraunga i ngā pūnaha katoa e whaimana ana, tae atu ki ngā pūtaonga raraunga motu, ngā taupunga, me te pūranga tūmahi, ehara i te tuatahi noa iho.

Ko ngā mahinga mō te whakatuturu i ngā tono a te Kaiwhakahaere Raraunga (te uru, te whakatika, te whakakore) kua tohua kua whakatuturu. Ko ngā taputapu whakaputu KPanel ka āhei i ngā Kaihoko kia whiwhi i ā rātou raraunga i ngā wa katoa i a ia wā o te whakamahi i te mahi.

Mēnā he pātai a koe mō ā mātou tikanga kaumātua, arā ki te pūrongo i te ahuatanga kino e matatauhia ana, tēnā hui mai ki a mātou i privacy@kapsulehost.com.

Kapsule Group Limited, New Zealand.