Add AES256 encryption to upload

Author: theory

CHANGELOG.md

@@ -7,6 +7,14 @@ All notable changes to this project will be documented in this file. It uses the
   [Semantic Versioning]: https://semver.org/spec/v2.0.0.html
     "Semantic Versioning 2.0.0"
 
+## [v0.2.1] — 2025-04-30
+
+### ⚡ Improvements
+
+*   Added AES256 server-side encryption to the S3 upload.
+
+  [v0.2.1]: https://github.com/tembo-io/temback/compare/v0.2.0...v0.2.1
+
 ## [v0.2.0] — 2025-04-30
 
 ### ⚡ Improvements
@@ -19,7 +27,7 @@ All notable changes to this project will be documented in this file. It uses the
     `PGHOST` environment variables, while respecting those variables and
     options.
 
-  [v0.2.0]: https://github.com/tembo-io/temback/compare/v0.1.1...v0.2.1
+  [v0.2.0]: https://github.com/tembo-io/temback/compare/v0.1.1...v0.2.0
 
 ## [v0.1.1] — 2025-04-24
 

Makefile

@@ -2,7 +2,7 @@ GO       ?= go
 GOOS     ?= $(word 1,$(subst /, ,$(word 4, $(shell $(GO) version))))
 GOARCH   ?= $(word 2,$(subst /, ,$(word 4, $(shell $(GO) version))))
 PLATFORM := $(GOOS)-$(GOARCH)
-VERSION  := v0.2.0
+VERSION  := v0.2.1
 REVISION := $(shell git rev-parse --short HEAD)
 REGISTRY ?= localhost:5001
 ldflags = -ldflags="-s -w -X 'main.version=$(VERSION)' -X 'main.build=$(REVISION)'"

main.go

@@ -355,11 +355,12 @@ func upload(cfg *backupConfig) error {
 	defer func() { _ = fh.Close() }()
 
 	if _, err := client.PutObject(context.Background(), &s3.PutObjectInput{
-		Bucket:            aws.String(cfg.bucket),
-		Key:               aws.String(cfg.UploadKey()),
-		Body:              fh,
-		ChecksumAlgorithm: types.ChecksumAlgorithmSha256,
-		ContentType:       aws.String("application/gzip"),
+		Bucket:               aws.String(cfg.bucket),
+		Key:                  aws.String(cfg.UploadKey()),
+		Body:                 fh,
+		ChecksumAlgorithm:    types.ChecksumAlgorithmSha256,
+		ServerSideEncryption: types.ServerSideEncryptionAes256,
+		ContentType:          aws.String("application/gzip"),
 	}); err != nil {
 		fmt.Println("Failed")
 		return err