| # Windows Server 2022 Unified Init Script - WEB-9 | |
| # Run in Administrator PowerShell after fresh Windows install | |
| # | |
| # Usage: irm <tinyurl> | iex | |
| # | |
| # This script handles the complete post-installation setup: | |
| # 1. VirtIO network driver (if CD drive mounted) | |
| # 2. DNS configuration | |
| # 3. Chocolatey + packages (.NET SDK, Git, PowerShell 7) | |
| # 4. OpenSSH Server with key-based authentication |
| # Simple sshd_config for Windows Server 2022 | |
| # WEB-9 - SSH setup (no PowerShell subsystem) | |
| # Authentication | |
| PubkeyAuthentication yes | |
| PasswordAuthentication no | |
| # Authorized keys file for administrators | |
| Match Group administrators | |
| AuthorizedKeysFile C:/ProgramData/ssh/administrators_authorized_keys |
| # Minimal sshd_config for Windows Server 2022 | |
| # WEB-9 - SSH setup | |
| # Authentication | |
| PubkeyAuthentication yes | |
| PasswordAuthentication no | |
| PermitRootLogin no | |
| # Authorized keys file for administrators | |
| Match Group administrators |
| # WEB-9: SSH Setup Only (for when main script fails) | |
| # Run these commands one by one in PowerShell as Administrator | |
| Write-Host "Installing OpenSSH Server..." -ForegroundColor Cyan | |
| Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0 | |
| Write-Host "Starting SSH service..." -ForegroundColor Cyan | |
| Start-Service sshd | |
| Set-Service -Name sshd -StartupType Automatic |
| # Windows Server 2022 Setup Script - WEB-9 (FIXED) | |
| # Handles PATH refresh and service startup correctly | |
| Set-ExecutionPolicy Bypass -Scope Process -Force | |
| [System.Net.ServicePointManager]::SecurityProtocol = 3072 | |
| Write-Host "Installing Chocolatey..." -ForegroundColor Cyan | |
| iex ((New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1')) | |
| Write-Host "Installing packages..." -ForegroundColor Cyan |
| # WEB-9: Network + SSH Key Quick Setup | |
| # Run after VirtIO network driver is installed | |
| Write-Host "Configuring DNS..." -ForegroundColor Cyan | |
| Set-DnsClientServerAddress -InterfaceAlias "Ethernet" -ServerAddresses ("8.8.8.8","8.8.4.4") | |
| Write-Host "Testing connectivity..." -ForegroundColor Cyan | |
| Test-NetConnection 8.8.8.8 | |
| Write-Host "DNS configured! Now run the full setup:" -ForegroundColor Green |
| # Windows Server 2022 Setup Script - WEB-9 | |
| # Quick setup for SSH + .NET SDK + Git | |
| # Run in Administrator PowerShell | |
| Set-ExecutionPolicy Bypass -Scope Process -Force | |
| [System.Net.ServicePointManager]::SecurityProtocol = 3072 | |
| Write-Host "Installing Chocolatey..." -ForegroundColor Cyan | |
| iex ((New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1')) | |
| $env:PATH = [System.Environment]::GetEnvironmentVariable("Path","Machine") + ";" + [System.Environment]::GetEnvironmentVariable("Path","User") |
To implement client-side encryption, we will use the Web Crypto API for encryption and decryption operations. We will ensure that the backend never has access to the plaintext data or encryption keys. First, let's create a function to generate a secure encryption key using the Web Crypto API:
async function generateEncryptionKey(): Promise<CryptoKey> {
// Generate a new AES-GCM key
const key = await crypto.subtle.generateKey(
{
name: "AES-GCM",
| <!DOCTYPE html> | |
| <html lang="en"> | |
| <head> | |
| <meta charset="utf-8"> | |
| <title>Collapsible Tree Example</title> | |
| <style> | |
| .node circle { |
| license: gpl-3.0 |