nano-git-db Enterprise

The enterprise edition of nano-git-db adds the pieces organisations tend to require on top of the open core: encryption of field values at rest in the synced log, and Lua scripting for triggers and stored procedures.

The open-source build can share and sync an encrypted database, but only the enterprise build can read and write the encrypted fields. The git host never sees plaintext, while the local database stays fully queryable.

Highlights

• At-rest encryption of field values in the synced log, so the git host cannot read the data.
• One key per database, kept out of the repo, with a per-field, per-table, or per-database policy set in the schema.
• Lua scripting: run a script against the database, or attach triggers and stored procedures to tables and fields. Scripts reach the data only through the same safe calls the rest of the program uses.
• Planned: a REST API for network access.
• Planned: sign-in for the shared web UI, with passwords, an authenticator app, passkeys, and optional third-party login.