Mimi-girl151/Data-backup-and-recovery-system-for-SMEs-in-Zambia

System, designed to automate data protection for SMEs in Zambia. It contains all source scripts, configuration templates, and security protocols required to deploy and maintain local server backups. By utilizing Git for version control, the project ensures that every iteration of the backup logic is tracked, audited, and easily reversible. # 🔐 VaultGuard - Secure Backup System for SMEs A **zero-knowledge**, enterprise-grade backup system designed specifically for Small and Medium Enterprises (SMEs) in Zambia. Files are encrypted **client-side** with AES-256-GCM before they ever leave your browser. The server never sees your unencrypted data or your encryption password. --- ## 📋 Table of Contents - Features - Technology Stack - Architecture - Quick Start - Security - API Documentation - Project Structure - Contributing - License --- ## ✨ Features ### Core Features - **Zero-Knowledge Architecture** - Files encrypted client-side; server never sees plaintext - **AES-256-GCM Encryption** - Industry-standard encryption with 256-bit keys - **PBKDF2 Key Derivation** - 600,000 iterations (OWASP 2024 compliant) - **Secure Authentication** - JWT tokens with bcrypt password hashing - **Role-Based Access Control** - Admin and Standard User roles ### Storage & Infrastructure - **MinIO Object Storage** - S3-compatible, self-hosted storage - **PostgreSQL Database** - Metadata and audit logging - **3-Tier Network Isolation** - Web, App, and Data networks separated - **Docker Containerization** - Easy deployment with Docker Compose - **Nginx Reverse Proxy** - TLS termination and security headers ### Security Hardening - **Rate Limiting** - Prevents brute force attacks (5/min login attempts) - **Non-Root Containers** - CIS Docker benchmark compliant - **Security Headers** - CSP, HSTS, X-Frame-Options, X-Content-Type-Options - **Audit Logging** - All user actions tracked - **Docker Secrets** - Credentials never exposed in environment variables ### User Features - User Registration & Login - Encrypted File Upload - File Recovery with Decryption - Dashboard with Storage Statistics - Password Change - Audit Trail of Actions --- ## 🛠 Technology Stack | Layer | Technology | Version | |-------|------------|---------| | **Frontend** | React + Vite | 18.x / 5.x | | **Backend** | FastAPI (Python) | 0.104.1 | | **Data …