app: do no prevent encrypted or local backups

Backup was disabled altogether to avoid leaking the private keys in
clear.

This relaxes this restriction only for client-side encrypted online
backups or local device-to-device transfers.

1 files changed, 39 insertions, 0 deletions

diff --git a/app/src/main/res/xml/backup_rules.xml b/app/src/main/res/xml/backup_rules.xml
new file mode 100644
index 0000000..6217761
--- /dev/null
+++ b/app/src/main/res/xml/backup_rules.xml
@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!--
+ * Tinc App, an Android binding and user interface for the tinc mesh VPN daemon
+ * Copyright (C) 2017-2023 Pacien TRAN-GIRARD
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+-->
+
+<full-backup-content>
+    <include
+        domain="file"
+        path="./"
+        requireFlags="clientSideEncryption" />
+    <include
+        domain="file"
+        path="./"
+        requireFlags="deviceToDeviceTransfer" />
+
+    <include
+        domain="external"
+        path="./"
+        requireFlags="clientSideEncryption" />
+    <include
+        domain="external"
+        path="./"
+        requireFlags="deviceToDeviceTransfer" />
+</full-backup-content>
\ No newline at end of file