Encrypted at Rest by Default: MongrelDB and Roamarr

Tue, 22 Sep 2026 08:00:00 -0500

“Encrypted at rest” is one of those phrases that shows up on feature checklists and means anywhere from “the disk is LUKS’d, which the hosting provider did, not us” to “every byte your data touches on its way to stable storage goes through an authenticated cipher,” and the distance between those two readings is where most of the actual security lives. We ship two products that store sensitive things, MongrelDB as the database and Roamarr as the travel organizer that sits on top of it, and both encrypt at rest with defaults the user never has to configure beyond one secret, which sounds like marketing until you look at what the defaults actually cover, because the interesting question was never whether to encrypt, it was which files people forget about when they say a database is encrypted.

Encryption on VisorCraft News

Encrypted at Rest by Default: MongrelDB and Roamarr