I have an off-the-shelf PC with a database on it (CouchDB). The database contains sensitive data. I'm taking this machine to a community with poor/zero data connectivity, where the database will accessible through their LAN. At some frequency, the machine will sync with an upstream "master" database in AWS - the machine may be physically driven to a place with connectivity to sync as required.
The machine has both public/private keys for a self-signed SSL certificates trusted by those using the service locally.
I cannot provide any reasonable level of access security to the machine. It is likely an unsolvable security situation. That said, I'm looking for some mitigations which I can do to decrease the severity of a successful attack and increase barriers to a successful attack.
- Full Disk Encryption (one "admin" on site will need this password in case of a reboot)
- Limit the amount of data on the machine.
- Can ensure nobody on site has user/root credentials for the machine (only tech support coming in to fix an issue).
Beyond these steps, what barriers should I be considering to make this tamper resistant? I'm primarily concerned about data privacy + data integrity.