From aa2672c45c0161bf8bb720d5cd71db4277b988d5 Mon Sep 17 00:00:00 2001
From: Jonathan Miller <1+jmiller@noreply.git.mokoconsulting.tech>
Date: Tue, 23 Jun 2026 21:59:46 +0000
Subject: [PATCH] docs: update wiki Home with multi-remote, complete feature
 list

---
 Home.md | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/Home.md b/Home.md
index cf4e83d..1315af5 100644
--- a/Home.md
+++ b/Home.md
@@ -5,7 +5,7 @@ Full-site backup and restore for Joomla — database, files, and configuration.
 | Field | Value |
 |---|---|
 | **Package** | `pkg_mokosuitebackup` |
-| **Type** | Joomla Package (9 sub-extensions) |
+| **Type** | Joomla Package (9 sub-extensions + 1 module) |
 | **Joomla** | 6.x+ |
 | **PHP** | 8.1+ |
 | **License** | GPL-3.0-or-later |
@@ -38,7 +38,7 @@ Full-site backup and restore for Joomla — database, files, and configuration.
 - Full site, database-only, files-only, differential
 - Pre-flight validation before backup starts
 - Auto-verify archive integrity after creation
-- Achive formats: ZIP, tar.gz, 7z
+- Archive formats: ZIP, tar.gz, 7z
 - AES-256 encryption (ZIP) or 7z native encryption
 - Data sanitization: clear passwords, emails, sessions
 - Manual purge by date with count preview
@@ -50,7 +50,8 @@ Full-site backup and restore for Joomla — database, files, and configuration.
 - Scheduled snapshot task + automatic retention
 
 ### Remote Storage
-- SDTP support with SSH key file authentication + remote directory browser
+- M=rti-remote: multiple destinations per profile (SFTP = S3 + GDrive simultaneously)
+- SFTP with SSH key file auth + remote directory browser
 - Amazon S3 (and S3-compatible)
 - Google Drive with OAuth2
 - Graceful degradation — local backup preserved if upload fails
@@ -67,8 +68,15 @@ Full-site backup and restore for Joomla — database, files, and configuration.
 - Snapshot widget, backup trend chart, storage breakdown
 - System health checks
 
+### Security
+- 10 ACL permissions with full enforcement across all controllers
+- Data sanitization: passwords, emails, sessions
+- SSH key stored base64-encoded, never exposed in UI
+- Path traversal protection on all archive extraction
+- Webcron secret hardening + IP whitelist
+
 ### CLI
-- `mokosuitebackup:run` - `mokosuitebackup:restore` - `mokosuitebackup:snapshot`
+- `mokosuitebackup:run` • `mokosuitebackup:restore` • `mokosuitebackup:snapshot`
 
 ### REST API
 - Backup: start, list, download, delete, profiles