fixed list items

initial try
fix release builder
2025-12-17 20:41:00 +01:00 · 2025-02-12 18:16:57 +01:00 · 2025-02-11 19:13:06 +01:00 · 2025-02-10 15:49:22 +01:00 · 2025-02-10 15:41:30 +01:00 · 2025-02-10 15:40:05 +01:00
48 changed files with 4732 additions and 444 deletions
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -1,10 +1,19 @@
 name: build-and-test
-on: [push, pull_request]
+
+#on: [push, pull_request]
+on:
+  pull_request:
+    branches:
+      - main
+  push:
+    branches:
+      - main
+
 jobs:
  build:
    strategy:
      matrix:
-        version: [1.21]
+        version: ['1.23']
        os: [ubuntu-latest, macos-latest]
    name: Build
    runs-on: ${{ matrix.os }}
@@ -41,7 +50,7 @@ jobs:
    steps:
      - uses: actions/setup-go@v5
        with:
-          go-version: 1.21
+          go-version: 1.23
      - uses: actions/checkout@v4
      - name: golangci-lint
        uses: golangci/golangci-lint-action@v6
--- a/.github/workflows/pushimage.yaml
+++ b/.github/workflows/pushimage.yaml
@@ -22,13 +22,13 @@ jobs:
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and push Docker image
-        uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355
+        uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991
        with:
          push: true
          tags: ghcr.io/tlinden/anydb:${{ github.ref_name}}

      - name: Build and push latest Docker image
-        uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355
+        uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991
        with:
          push: true
          tags: ghcr.io/tlinden/anydb:latest
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -0,0 +1,87 @@
+name: build-release
+on:
+  push:
+    tags:
+      - "v*.*.*"
+
+jobs:
+  release:
+    name: Build Release Assets
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: 1.23.5
+
+      - name: Build the executables
+        run: ./mkrel.sh anydb ${{ github.ref_name}}
+
+      - name: List the executables
+        run: ls -l ./releases
+
+      - name: Upload the binaries
+        uses: svenstaro/upload-release-action@v2
+        with:
+          repo_token: ${{ secrets.GITHUB_TOKEN }}
+          tag: ${{ github.ref_name }}
+          file: ./releases/*
+          file_glob: true
+
+      - name: Build Changelog
+        id: github_release
+        uses: mikepenz/release-changelog-builder-action@v5
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          mode: "PR"
+          configurationJson: |
+            {
+              "template": "#{{CHANGELOG}}\n\n**Full Changelog**: #{{RELEASE_DIFF}}",
+              "pr_template": "- #{{TITLE}} (##{{NUMBER}}) by #{{AUTHOR}}\n#{{BODY}}",
+              "empty_template": "- no changes",
+              "categories": [
+                {
+                    "title": "## New Features",
+                    "labels": ["add", "feature"]
+                },
+                {
+                    "title": "## Bug Fixes",
+                    "labels": ["fix", "bug", "revert"]
+                },
+                {
+                    "title": "## Documentation Enhancements",
+                    "labels": ["doc"]
+                },
+                {
+                    "title": "## Refactoring Efforts",
+                    "labels": ["refactor"]
+                },
+                {
+                    "title": "## Miscellaneus Changes",
+                    "labels": []
+                }
+              ],
+              "ignore_labels": [
+                 "duplicate", "good first issue", "help wanted", "invalid", "question", "wontfix"
+              ],
+              "label_extractor": [
+                 {
+                    "pattern": "(.) (.+)",
+                    "target": "$1"
+                 },
+                 {
+                    "pattern": "(.) (.+)",
+                    "target": "$1",
+                    "on_property": "title"
+                 }
+              ]
+            }
+    
+      - name: Create Release
+        uses: softprops/action-gh-release@v2
+        with:
+          body: ${{steps.github_release.outputs.changelog}}
--- a/18
+++ b/18
@@ -1,4 +1,20 @@
-FROM golang:1.22-alpine as builder
+# 
+# Copyright © 2024 Thomas von Dein
+# 
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+# 
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+# 
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+# 
+FROM golang:1.23-alpine as builder

 RUN apk update
 RUN apk upgrade
--- a/21
+++ b/21
@@ -29,7 +29,7 @@ BUILD     = $(shell date +%Y.%m.%d.%H%M%S)
 VERSION  := $(if $(filter $(BRANCH), development),$(version)-$(BRANCH)-$(COMMIT)-$(BUILD),$(version))
 HAVE_POD := $(shell pod2text -h 2>/dev/null)

-all: $(tool).1 cmd/$(tool).go buildlocal
+all: $(tool).1 cmd/$(tool).go app/dbentry.pb.go buildlocal

 %.1: %.pod
 ifdef HAVE_POD
@@ -49,12 +49,17 @@ endif
 # awk '/SYNOPS/{f=1;next} /DESCR/{f=0} f' $*.pod  | sed 's/^    //' >> cmd/$*.go
 # echo "\`" >> cmd/$*.go

+app/dbentry.pb.go: app/dbentry.proto
+	protoc -I=. --go_out=app app/dbentry.proto
+	mv app/github.com/tlinden/anydb/app/dbentry.pb.go app/dbentry.pb.go
+	rm -rf app/github.com
+
 buildlocal:
 	go build -ldflags "-X 'github.com/tlinden/anydb/cfg.VERSION=$(VERSION)'"

+# binaries are being built by ci workflow on tag creation
 release:
-	./mkrel.sh $(tool) $(version)
-	gh release create $(version) --generate-notes releases/*
+	gh release create $(version) --generate-notes

 install: buildlocal
 	install -d -o $(UID) -g $(GID) $(PREFIX)/bin
@@ -66,11 +71,11 @@ clean:
 	rm -rf $(tool) releases coverage.out

 test:
-	go test -v ./...
+	ANYDB_PASSWORD=test go test -v ./...

 singletest:
 	@echo "Call like this: ''make singletest TEST=TestPrepareColumns MOD=lib"
-	go test -run $(TEST) github.com/tlinden/anydb/$(MOD)
+	ANYDB_PASSWORD=test go test -run $(TEST) github.com/tlinden/anydb/$(MOD)

 cover-report:
 	go test ./... -cover -coverprofile=coverage.out
@@ -98,3 +103,9 @@ lint:
 lint-full:
 	golangci-lint run --enable-all --exclude-use-default --disable exhaustivestruct,exhaustruct,depguard,interfacer,deadcode,golint,structcheck,scopelint,varcheck,ifshort,maligned,nosnakecase,godot,funlen,gofumpt,cyclop,noctx,gochecknoglobals,paralleltest,forbidigo,gci,godox,goimports,ireturn,stylecheck,testpackage,mirror,nestif,revive,goerr113,gomnd
 	gocritic check -enableAll *.go
+
+demo:
+	make -C demo demo
+
+
+.PHONY: demo
--- a/README.md
+++ b/README.md
@@ -2,7 +2,16 @@

 [![Actions](https://github.com/tlinden/anydb/actions/workflows/ci.yaml/badge.svg)](https://github.com/tlinden/anydb/actions)
 [![License](https://img.shields.io/badge/license-GPL-blue.svg)](https://github.com/tlinden/anydb/blob/master/LICENSE)
+[![Go Coverage](https://github.com/tlinden/anydb/wiki/coverage.svg)](https://raw.githack.com/wiki/tlinden/anydb/coverage.html)
 [![Go Report Card](https://goreportcard.com/badge/github.com/tlinden/anydb)](https://goreportcard.com/report/github.com/tlinden/anydb)
+[![GitHub release](https://img.shields.io/github/v/release/tlinden/anydb?color=%2300a719)](https://github.com/TLINDEN/anydb/releases/latest)
+[![Documentation](https://img.shields.io/badge/manpage-documentation-blue)](https://github.com/TLINDEN/anydb/blob/master/anydb.pod)
+
+> [!CAUTION]
+> Version 0.1.3 introduced a [regression bug](https://github.com/TLINDEN/anydb/issues/19),
+> which caused the encryption feature not to work correctly anymore.
+> If you are using anydb 0.1.3, you are urgently advised to
+> upgrade to 0.2.0

 Anydb is a simple to use commandline tool to store anything you'd
 like, even binary files etc. It is a re-implementation of
@@ -16,6 +25,7 @@ reasons:
  often, which is not good for a tool intended to be used for many
  years.
 - more features:
+  - output table in list mode uses TAB separator
  - better STDIN + pipe support
  - supports JSON output
  - supports more verbose tabular output
@@ -23,81 +33,18 @@ reasons:
  - tagging
  - filtering using tags
  - encryption of entries
+  - templates for custom output for maximum flexibility
+  - includes a tiny web server, which serves a restful API
+
+And I wrote a very similar [tool](https://www.daemon.de/projects/dbtool/) 24 years ago and wanted to do it again wit go.

 **anydb** can do all the things you can do with skate:

-```shell
-# Store something (and sync it to the network)
-anydb set kitty meow
-
-# Fetch something (from the local cache)
-anydb get kitty
-
-# What’s in the store?
-anydb list
-
-# Spaces are fine
-anydb set "kitty litter" "smells great"
-
-# You can store binary data, too
-anydb set profile-pic < my-cute-pic.jpg
-anydb get profile-pic > here-it-is.jpg
-
-# Unicode also works, of course
-anydb set 猫咪 喵
-anydb get 猫咪
-
-# For more info
-anydb --help
-
-# Do creative things with anydb list
-anydb set penelope marmalade
-anydb set christian tacos
-anydb set muesli muesli
-
-anydb list | xargs -n 2 printf '%s loves %s.\n'
-```
+![simple demo](https://github.com/TLINDEN/anydb/blob/main/demo/intro.gif)

 However, there are more features than just that!

-```shell
-# you can assign tags
-anydb set foo bar -t note,important
-
-# and filter for them
-anydb list -t important
-
-# beside tags filtering you can also use regexps for searching
-anydb list '[a-z]+\d'
-
-# anydb also supports a wide output
-anydb list -o wide
-KEY     TAGS            SIZE    AGE             VALUE 
-blah    important       4 B     7 seconds ago   haha 
-foo                     3 B     15 seconds ago  bar  
-猫咪                    3 B     3 seconds ago   喵   
-
-# there are shortcuts as well
-anydb ls -l
-anydb /
-
-# other outputs are possible as well
-anydb list -o json
-
-# you can backup your database
-anydb export -o backup.json
-
-# and import it somewhere else
-anydb import -r backup.json
-
-# you can encrypt entries. anydb asks for a passphrase
-# and will do the same when you retrieve the key using the
-# get command.
-anydb set mypassword -e
-
-# it comes with a manpage builtin
-anydb man
-```
+![advanced demo](https://github.com/TLINDEN/anydb/blob/main/demo/advanced.gif)

 ## Installation

@@ -130,6 +77,30 @@ There are multiple ways to install **anydb**:
 If you  do not find a  binary release for your  platform, please don't
 hesitate to ask me about it, I'll add it.

+### Using the docker image
+
+A pre-built docker  image is available, which you can  use to test the
+app without  installing it. To download:
+
+```shell
+docker pull ghcr.io/tlinden/anydb:latest
+```
+
+To execute anydb  inside the image do something like this:
+
+```shell
+mkdir mydb
+docker run -ti  -v mydb:/db -u `id -u $USER` -e HOME=/db ghcr.io/tlinden/anydb:latest set foo bar
+docker run -ti  -v mydb:/db -u `id -u $USER` -e HOME=/db ghcr.io/tlinden/anydb:latest list -o wide
+```
+
+Here, we operate in a local  directory `mydb`, which we'll use as HOME
+inside  the  docker  container.  anydb  will  store  its  database  in
+`mydb/.config/anydb/default.db`.
+
+A list of available images is  [here](https://github.com/tlinden/anydb/pkgs/container/anydb/versions?filters%5Bversion_type%5D=tagged)
+
+
 ## Documentation

 The  documentation  is  provided  as  a unix  man-page.   It  will  be
--- a/TODO.md
+++ b/TODO.md
@@ -0,0 +1,19 @@
+## Features
+
+- repl
+- mime-type => exec app + value
+- add waitgroup to db.go funcs
+- RestList does not support any params?
+
+## DB Structure
+
+- put tags into sub bucket see #1
+
+tags bucket
+key/tag => tag/key
+tag/key => tag
+
+A delete would just delete all keys from all values and then:
+lookup in tags bucket for all key/*, then iterate over the values and
+remove all tag/key's. Then deleting a key would not leave any residue
+behind.
--- a/anydb.1
+++ b/anydb.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man 4.14 (Pod::Simple 3.40)
+.\" Automatically generated by Pod::Man 4.14 (Pod::Simple 3.42)
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -133,7 +133,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ANYDB 1"
-.TH ANYDB 1 "2024-12-18" "1" "User Commands"
+.TH ANYDB 1 "2025-02-10" "1" "User Commands"
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -151,14 +151,20 @@ anydb \- a personal key value store
 \&    Available Commands:
 \&      completion  Generate the autocompletion script for the specified shell
 \&      del         Delete key
+\&      edit        Edit a key
 \&      export      Export database to json
 \&      get         Retrieve value for a key
 \&      help        Help about any command
 \&      import      Import database dump
+\&      info        info
 \&      list        List database contents
+\&      man         show manual page
+\&      serve       run REST API listener
 \&      set         Insert key/value pair
 \&    
 \&    Flags:
+\&      \-b, \-\-bucket string   use other bucket (default: data) (default "data")
+\&      \-c, \-\-config string   toml config file
 \&      \-f, \-\-dbfile string   DB file to use (default "/home/scip/.config/anydb/default.db")
 \&      \-d, \-\-debug           Enable debugging
 \&      \-h, \-\-help            help for anydb
@@ -168,9 +174,585 @@ anydb \- a personal key value store
 .Ve
 .SH "DESCRIPTION"
 .IX Header "DESCRIPTION"
-Anydb is a simple to use commandline tool to store anything you'd
-like, even binary files etc. It uses a key/value store (bbolt) in your
-home directory.
+Anydb is a  commandline personal key value store, it  is simple to use
+and  can be  used  to store  anything you'd  like,  even binary  files
+etc. It uses a key/value store (bbolt) in your home directory.
+.PP
+The tool provides a number of subcommands to use it, there are global
+options and each subcommand has its own set of options.
+.SH "GLOBAL OPTIONS"
+.IX Header "GLOBAL OPTIONS"
+.ie n .IP """\-f, \-\-dbfile filename""" 4
+.el .IP "\f(CW\-f, \-\-dbfile filename\fR" 4
+.IX Item "-f, --dbfile filename"
+The default location of your databas is
+\&\f(CW\*(C`$HOME/.config/anydb/default.db\*(C'\fR. You can change this with the \f(CW\*(C`\-f\*(C'\fR
+option.
+.ie n .IP """\-b, \-\-bucket name""" 4
+.el .IP "\f(CW\-b, \-\-bucket name\fR" 4
+.IX Item "-b, --bucket name"
+Data in a bbolt key-value-store are managed in so called
+buckets. These are kind of namespaces, where each key must be
+unique. However, a database may contain more than one bucket.
+.Sp
+By default anydb uses a bucket named \*(L"data\*(R", but you can change this
+using the option \f(CW\*(C`\-b\*(C'\fR.
+.Sp
+Buckets can be configured to always encrypt values, see \s-1ENCRYTPTION\s0.
+.ie n .IP """\-c, \-\-config filename""" 4
+.el .IP "\f(CW\-c, \-\-config filename\fR" 4
+.IX Item "-c, --config filename"
+Under normal circumstances you don't need a configuration file. But if
+you want, you can provide one using the option \f(CW\*(C`\-c\*(C'\fR.
+.Sp
+Anydb looks for a couple of default locations for a config file. You
+only need this option if you want to supply a configuration on a
+non-standard location. See \s-1CONFIGURATION\s0 for more details.
+.ie n .IP """\-d, \-\-debug""" 4
+.el .IP "\f(CW\-d, \-\-debug\fR" 4
+.IX Item "-d, --debug"
+Enable debug output.
+.ie n .IP """\-h, \-\-help""" 4
+.el .IP "\f(CW\-h, \-\-help\fR" 4
+.IX Item "-h, --help"
+Show the usage of anydb.
+.ie n .IP """\-v, \-\-version""" 4
+.el .IP "\f(CW\-v, \-\-version\fR" 4
+.IX Item "-v, --version"
+Show the program version.
+.PP
+All of these options can be used with subcommands as well.
+.SH "SUBCOMMANDS"
+.IX Header "SUBCOMMANDS"
+.SS "completion"
+.IX Subsection "completion"
+The \fBcompletion\fR command can be used to setup completion for
+anydb. Just put something like this into your shell's configuration
+file:
+.PP
+.Vb 1
+\&    source <(anydb completion bash)
+.Ve
+.PP
+If you use another shell, specify it instead of bash, of course.
+.SS "set"
+.IX Subsection "set"
+The \fBset\fR command is being used to insert or update a key-value pair.
+.PP
+Usage:
+.PP
+.Vb 2
+\&    Usage:
+\&      anydb set <key> [<value> | \-r <file>] [\-t <tag>] [flags]
+\&    
+\&    Aliases:
+\&      set, add, s, +
+\&    
+\&    Flags:
+\&      \-e, \-\-encrypt            encrypt value
+\&      \-r, \-\-file string        Filename or \- for STDIN
+\&      \-h, \-\-help               help for set
+\&      \-t, \-\-tags tag,tag,...   tags, multiple allowed
+.Ve
+.PP
+The standard way to insert a new entry is really simple:
+.PP
+.Vb 1
+\&    anydb set key value
+.Ve
+.PP
+If you don't specify a value, anydb expects you to feed it some data
+via \s-1STDIN.\s0 For example:
+.PP
+.Vb 1
+\&    anydb set key < file
+.Ve
+.PP
+You might as well specify a file directly using the \f(CW\*(C`\-f\*(C'\fR option:
+.PP
+.Vb 1
+\&    anydb set key \-f file
+.Ve
+.PP
+Values can be encrypted using \fBChaCha20Poly1305\fR when you specify the
+\&\f(CW\*(C`\-e\*(C'\fR option. Anydb will ask you interactively for a passphrase. You
+can also provide the passphrase using the environment variable
+\&\f(CW\*(C`ANYDB_PASSWORD\*(C'\fR. To encrypt the value, a cryptographically secure
+key will be derived from the passphrase using the ArgonID2
+algorithm. Each value can be encrypted with another passphrase. So,
+the database itself is not encrypted, just the values.
+.PP
+You can supply tags by using the option \f(CW\*(C`\-t\*(C'\fR. Multiple tags can be
+provided either by separating them with a comma or by using multiple
+\&\f(CW\*(C`\-t\*(C'\fR parameters:
+.PP
+.Vb 2
+\&    anydb set key value \-t tag1,tag2
+\&    anydb set key value \-t tag1 \-t tag2
+.Ve
+.PP
+You can later filter entries by tag or by a combination of tags.
+.PP
+To edit or modify an entry, just use the \fBset\fR command with the same
+key, the value in the database will be overwritten with the new
+value. An alternative option is the \fBedit\fR command, see below.
+.SS "get"
+.IX Subsection "get"
+To retrieve the value of a key, use the \fBget\fR subcommand.
+.PP
+Usage:
+.PP
+.Vb 2
+\&    Usage:
+\&      anydb get  <key> [\-o <file>] [\-m <mode>] [\-n \-N] [\-T <tpl>] [flags]
+\&    
+\&    Aliases:
+\&      get, show, g, .
+\&    
+\&    Flags:
+\&      \-h, \-\-help              help for get
+\&      \-m, \-\-mode string       output format (simple|wide|json|template) (default \*(Aqsimple\*(Aq)
+\&      \-n, \-\-no\-headers        omit headers in tables
+\&      \-N, \-\-no\-human          do not translate to human readable values
+\&      \-o, \-\-output string     output value to file (ignores \-m)
+\&      \-T, \-\-template string   go template for \*(Aq\-m template\*(Aq
+.Ve
+.PP
+In its simplest form you just call the \fBget\fR subcommand with the key
+you want to have the value for. The value is being printed to \s-1STDOUT\s0
+by default:
+.PP
+.Vb 1
+\&    anydb get key
+.Ve
+.PP
+If the  value is binary  content, it will  not just being  printed. In
+those cases you need to either redirect  output into a file or use the
+option \f(CW\*(C`\-o\*(C'\fR to write to a file:
+.PP
+.Vb 2
+\&    anydb get key > file
+\&    anydb get key \-o file
+.Ve
+.PP
+If the value is encrypted, you will be asked for the passphrase to
+decrypt it. If the environment variable \f(CW\*(C`ANYDB_PASSWORD\*(C'\fR is set, its
+value will be used instead.
+.PP
+There are different output modes you  can choose from: simple, wide and
+json. The \*(L"simple\*(R"  mode is the default one, it  just prints the value
+as is. The \*(L"wide\*(R" mode prints  a tabular output similar to the \fBlist\fR
+subcommand, see  there for more  details. The options \f(CW\*(C`\-n\*(C'\fR  and \f(CW\*(C`\-N\*(C'\fR
+have the same  meaning as in the list command.  The \*(L"json\*(R" mode prints
+the raw  \s-1JSON\s0 representation of  the whole database  entry. Decryption
+will only take place in \*(L"simple\*(R"  and \*(L"json\*(R" mode. The \*(L"template\*(R" mode
+provides  the   most  flexibily,  it   is  detailed  in   the  section
+\&\s-1TEMPLATES\s0.
+.SS "list"
+.IX Subsection "list"
+The \fBlist\fR subcommand displays a list of all database entries.
+.PP
+Usage:
+.PP
+.Vb 2
+\&    Usage:
+\&      anydb list  [<filter\-regex> | \-t <tag> ] [\-m <mode>] [\-nNif] [\-T <tpl>] [flags]
+\&    
+\&    Aliases:
+\&      list, ls, /, find, search
+\&    
+\&    Flags:
+\&      \-i, \-\-case\-insensitive   filter case insensitive
+\&      \-h, \-\-help               help for list
+\&      \-m, \-\-mode string        output format (table|wide|json|template), wide is a verbose table. (default \*(Aqtable\*(Aq)
+\&      \-n, \-\-no\-headers         omit headers in tables
+\&      \-N, \-\-no\-human           do not translate to human readable values
+\&      \-s, \-\-search\-fulltext    perform a full text search
+\&      \-t, \-\-tags stringArray   tags, multiple allowed
+\&      \-T, \-\-template string    go template for \*(Aq\-m template\*(Aq
+\&      \-l, \-\-wide\-output        output mode: wide
+.Ve
+.PP
+In its simplest form \- without any options \- , the \fBlist\fR command
+just prints all keys with their values to \s-1STDOUT.\s0 Values are being
+truncated to maximum of 60 characters, that is, multiline values are
+not completely shown in order to keep the tabular view readable.
+.PP
+To get more informations about each entry, use the \f(CW\*(C`\-o wide\*(C'\fR or \f(CW\*(C`\-l\*(C'\fR
+option.  In addition  to  the  key and  value  also  the size,  update
+timestamp and tags will be printed. Time and size values are converted
+into a  human readable form, you  can suppress this behavior  with the
+\&\f(CW\*(C`\-N\*(C'\fR option. You may omit the headers using the option \f(CW\*(C`\-n\*(C'\fR
+.PP
+Sometimes you might want to filter the list of entries. Either because
+your database grew too large or because you're searching for
+something. In that case you have two options: You may supply one or
+more tags or provide a filter regexp. To filter by tag, do:
+.PP
+.Vb 3
+\&    anydb list \-t tag1
+\&    anydb list \-t tag1,tag2
+\&    anydb list \-t tag1 \-t tag2
+.Ve
+.PP
+To filter using a regular expression, do:
+.PP
+.Vb 1
+\&   anydb list "foo.*bar"
+.Ve
+.PP
+Regular expressions follow the golang \fBre2\fR syntax. For more details
+about the syntax, refer to
+<https://github.com/google/re2/wiki/Syntax>. Please note, that this
+regexp dialect is not \s-1PCRE\s0 compatible, but supports most of its
+features.
+.PP
+If you want to search case insensitive, add the option \f(CW\*(C`\-i\*(C'\fR.
+.PP
+By default anydb only searches through the keys. If you want to search
+through the values as well, then use the \f(CW\*(C`\-s\*(C'\fR option, which enables
+full-text search.
+.PP
+You can \- as with the \fBget\fR command \- use other output modes. The
+default mode is \*(L"table\*(R". The \*(L"wide\*(R" mode is, as already mentioned, a
+more detailed table. Also supported is \*(L"json\*(R" mode and \*(L"template\*(R"
+mode. For details about using templates see \s-1TEMPLATES\s0.
+.SS "del"
+.IX Subsection "del"
+Use the \fBdel\fR command to delete database entries.
+.PP
+Usage:
+.PP
+.Vb 2
+\&    Usage:
+\&      anydb del <key> [flags]
+\&    
+\&    Aliases:
+\&      del, d, rm
+\&    
+\&    Flags:
+\&      \-h, \-\-help   help for del
+.Ve
+.PP
+The subcommand  \fBdel\fR does not  provide any further options,  it just
+deletes the entry referred to by the given key. No questions are being
+asked.
+.SS "edit"
+.IX Subsection "edit"
+The \fBedit\fR command makes it easier to modify larger entries.
+.PP
+Usage:
+.PP
+.Vb 2
+\&   Usage:
+\&      anydb edit <key> [flags]
+\&    
+\&    Aliases:
+\&      edit, modify, mod, ed, vi
+\&    
+\&    Flags:
+\&      \-h, \-\-help   help for edit
+.Ve
+.PP
+The subcommand  \fBedit\fR does not  provide any further options. It
+works like this:
+.IP "1. Write the value info a temporary file." 4
+.IX Item "1. Write the value info a temporary file."
+.PD 0
+.IP "2. Execute the editor (which one, see below!) with that file." 4
+.IX Item "2. Execute the editor (which one, see below!) with that file."
+.IP "3. Now you can edit the file and save+close it when done." 4
+.IX Item "3. Now you can edit the file and save+close it when done."
+.IP "4. Anydb picks up the file and if the content has changed, puts its value into the \s-1DB.\s0" 4
+.IX Item "4. Anydb picks up the file and if the content has changed, puts its value into the DB."
+.PD
+.PP
+By default anydb executes the \f(CW\*(C`vi\*(C'\fR command. You can modify this
+behavior by setting the environment variable \f(CW\*(C`EDITOR\*(C'\fR appropriately.
+.PP
+Please note, that this does not work with binary content!
+.SS "export"
+.IX Subsection "export"
+Since the bbolt database file is not portable across platforms (it is
+bound to the endianess of the \s-1CPU\s0 it was being created on), you might
+want to create a backup file of your database. You can do this with
+the \fBexport\fR subcommand.
+.PP
+Usage:
+.PP
+.Vb 2
+\&    Usage:
+\&      anydb export \-o <json filename> [flags]
+\&    
+\&    Aliases:
+\&      export, dump, backup
+\&    
+\&    Flags:
+\&      \-h, \-\-help            help for export
+\&      \-o, \-\-output string   output to file
+.Ve
+.PP
+The database dump  is a \s-1JSON\s0 representation of the  whole database and
+will be  printed to the file  specified with the \f(CW\*(C`\-o\*(C'\fR  option. If you
+specify \*(L"\-\*(R" as the filename, it will be written to \s-1STDIN.\s0
+.PP
+.Vb 2
+\&    anydb export \-o dump.json
+\&    anydb export \-o \- > dump.json
+.Ve
+.PP
+Please note, that encrypted values will not be decrypted. This might
+change in a future version of anydb.
+.SS "import"
+.IX Subsection "import"
+The \fBimport\fR subcommand can be used to restore a database from a \s-1JSON\s0
+dump.
+.PP
+Usage:
+.PP
+.Vb 2
+\&    Usage:
+\&      anydb import \-i <json file> [flags]
+\&    
+\&    Aliases:
+\&      import, restore
+\&    
+\&    Flags:
+\&      \-r, \-\-file string        Filename or \- for STDIN
+\&      \-h, \-\-help               help for import
+\&      \-t, \-\-tags stringArray   tags, multiple allowed
+.Ve
+.PP
+The \f(CW\*(C`import\*(C'\fR subcommand reads the \s-1JSON\s0 contents from
+the file specified with the \f(CW\*(C`\-i\*(C'\fR option. If you specify \*(L"\-\*(R" as the
+filename, it will be read from \s-1STDIN.\s0
+.PP
+.Vb 3
+\&    anydb import \-i \- < dump.json
+\&    anydb import \-i dump.json
+\&    cat dump.json | anydb import \-i \-
+.Ve
+.PP
+If there is already a database, it will be saved by appending a
+timestamp and a new database with the contents of the dump will be
+created.
+.SS "serve"
+.IX Subsection "serve"
+Anydb provides a RESTful \s-1API,\s0 which you can use to manage the database
+from somewhere  else. The \s-1API\s0  does not provide any  authentication or
+any other security measures, so better only use it on localhost.
+.PP
+Usage:
+.PP
+.Vb 2
+\&    Usage:
+\&      anydb serve [\-l host:port] [flags]
+\&    
+\&    Flags:
+\&      \-h, \-\-help            help for serve
+\&      \-l, \-\-listen string   host:port (default "localhost:8787")
+.Ve
+.PP
+To start the listener, just execute the \fBserve\fR subcommand. You can
+tweak the ip address and tcp port using the \f(CW\*(C`\-l\*(C'\fR option. The listener
+will not fork and run in the foreground. Logs are being printed to
+\&\s-1STDOUT\s0 as long as the listener runs.
+.PP
+For more details about the \s-1API,\s0 please see the \*(L"\s-1REST API\*(R"\s0 section.
+.SS "info"
+.IX Subsection "info"
+The \fBinfo\fR subcommand shows you some information about your current
+database.
+.PP
+Usage:
+.PP
+.Vb 2
+\&    Usage:
+\&      anydb info [flags]
+\&    
+\&    Flags:
+\&      \-h, \-\-help       help for info
+\&      \-N, \-\-no\-human   do not translate to human readable values
+.Ve
+.PP
+Data being shown are: filename and size, number of keys per bucket. If
+you supply the \f(CW\*(C`\-d\*(C'\fR option (debug), some bbolt internals are being
+displayed as well.
+.SS "man"
+.IX Subsection "man"
+The \fBman\fR subcommand shows an unformatted text variant of the manual
+page (which are currently reading).
+.PP
+Usage:
+.PP
+.Vb 2
+\&    Usage:
+\&      anydb man [flags]
+\&    
+\&    Flags:
+\&      \-h, \-\-help   help for man
+.Ve
+.PP
+The manual is being piped into the \f(CW\*(C`more\*(C'\fR command, which is being
+expected to exist according to the \s-1POSIX\s0 standard on all supported
+unix platforms. It might not work on Windows.
+.SH "TEMPLATES"
+.IX Header "TEMPLATES"
+The \fBget\fR and \fBlist\fR commands support a template feature, which is
+very handy to create you own kind of formatting. The template syntax
+being used is the \s-1GO\s0 template language, refer to
+<https://pkg.go.dev/text/template> for details.
+.PP
+Each template operates on one or more entries, no loop construct is
+required, the template provided applies to every matching entry
+separatley.
+.PP
+The following template variables can be used:
+.IP "\fB.Key\fR \- string" 4
+.IX Item ".Key - string"
+.PD 0
+.IP "\fB.Value\fR \- string" 4
+.IX Item ".Value - string"
+.IP "\fB.Bin\fR \- []byte" 4
+.IX Item ".Bin - []byte"
+.IP "\fB.Created\fR \- timestamp.Time" 4
+.IX Item ".Created - timestamp.Time"
+.PD
+To retrieve a string representation of the timestamp, use \f(CW\*(C`.Created.AsTime\*(C'\fR.
+If you need a unix timestamp since epoch, use \f(CW\*(C`.Created.Unix\*(C'\fR.
+.IP "\fB.Tags\fR \- []string" 4
+.IX Item ".Tags - []string"
+.PD 0
+.IP "\fB.Encrypted\fR bool" 4
+.IX Item ".Encrypted bool"
+.PD
+.PP
+Prepend a single dot (\*(L".\*(R") before each variable name.
+.PP
+Here are some examples how to use the feature:
+.PP
+Only show the keys of all entries:
+.PP
+.Vb 1
+\&    anydb list \-m template \-T "{{ .Key }}"
+.Ve
+.PP
+Format the list in a way so that is possible to evaluate it in a
+shell:
+.PP
+.Vb 2
+\&    eval $(anydb get foo \-m template \-T "key=\*(Aq{{ .Key }}\*(Aq value=\*(Aq{{ .Value }}\*(Aq ts=\*(Aq{{ .Created.AsTime}}\*(Aq")
+\&    echo "Key: $key, Value: $value, When: $ts"
+.Ve
+.PP
+Print the values in \s-1CSV\s0 format \s-1ONLY\s0 if they have some tag:
+.PP
+.Vb 1
+\&    anydb list \-m template \-T "{{ if .Tags }}{{ .Key }},{{ .Value }},{{ .Created.AsTime}}{{ end }}"
+.Ve
+.SH "CONFIGURATION"
+.IX Header "CONFIGURATION"
+Anydb looks at the following locations for a configuration file, in
+that order:
+.ie n .IP """$HOME/.config/anydb/anydb.toml""" 4
+.el .IP "\f(CW$HOME/.config/anydb/anydb.toml\fR" 4
+.IX Item "$HOME/.config/anydb/anydb.toml"
+.PD 0
+.ie n .IP """$HOME/.anydb.toml""" 4
+.el .IP "\f(CW$HOME/.anydb.toml\fR" 4
+.IX Item "$HOME/.anydb.toml"
+.ie n .IP """anydb.toml"" in the current directory" 4
+.el .IP "\f(CWanydb.toml\fR in the current directory" 4
+.IX Item "anydb.toml in the current directory"
+.ie n .IP "or specify one using ""\-c""" 4
+.el .IP "or specify one using \f(CW\-c\fR" 4
+.IX Item "or specify one using -c"
+.PD
+.PP
+The configuration format uses the \s-1TOML\s0 language, refer to
+<https://toml.io/en/> for more details. The key names correspond to
+the commandline options in most cases.
+.PP
+Configuration follows a certain precedence: the files are tried to be
+read in the given order, followed by commandline options. That is, the
+last configuration file wins, unless the user provides a commandline
+option, then this setting will be taken.
+.PP
+A complete configuration file might look like this:
+.PP
+.Vb 7
+\&    # defaults
+\&    dbfile     = "~/.config/anydb/default.db"
+\&    dbbucket   = "data"
+\&    noheaders  = false
+\&    nohumanize = false
+\&    encrypt    = false
+\&    listen     = "localhost:8787"
+\&    
+\&    # different setups for different buckets
+\&    [buckets.data]
+\&    encrypt = true
+\&    
+\&    [buckets.test]
+\&    encrypt = false
+.Ve
+.PP
+Under normal circumstances you don't need a configuration
+file. However, if you want to use different buckets, then this might
+be a handy option. Buckets are being configured in ini-style with the
+term \*(L"bucket.\*(R" followed by the bucket name. In the example above we
+enable encryption for the default bucket \*(L"data\*(R" and disable it for a
+bucket \*(L"test\*(R". To use different buckets, use the \f(CW\*(C`\-b\*(C'\fR option.
+.SH "REST API"
+.IX Header "REST API"
+The subcommand \fBserve\fR starts a simple \s-1HTTP\s0 service, which responds
+to RESTful \s-1HTTP\s0 requests. The listener responds to all requests with a
+\&\s-1JSON\s0 encoded response. The response contains the status and the
+content \- if any \- of the requested resource.
+.PP
+The following requests are supported:
+.IP "\fB\s-1GET\s0 /anydb/v1/\fR" 4
+.IX Item "GET /anydb/v1/"
+Returns a \s-1JSON\s0 encoded list of all entries.
+.IP "\fB\s-1GET\s0 /anydb/v1/key\fR" 4
+.IX Item "GET /anydb/v1/key"
+Returns the \s-1JSON\s0 encoded entry, if found.
+.IP "\fB\s-1PUT\s0 /anydb/v1/\fR" 4
+.IX Item "PUT /anydb/v1/"
+Create an entry. Expects a \s-1JSON\s0 encoded request object in \s-1POST\s0 data.
+.IP "\fB\s-1DELETE\s0 /anydb/v1/key\fR" 4
+.IX Item "DELETE /anydb/v1/key"
+Delete an entry.
+.PP
+Some curl example calls to the \s-1API:\s0
+.PP
+Post a new key:
+    curl \-X \s-1PUT\s0 localhost:8787/anydb/v1/ \e
+      \-H 'Content\-Type: application/json' \e
+      \-d '{\*(L"key\*(R":\*(L"foo\*(R",\*(L"val\*(R":\*(L"bar\*(R"}'
+.PP
+Retrieve the value:
+.PP
+.Vb 1
+\&    curl localhost:8787/anydb/v1/foo
+.Ve
+.PP
+List all keys:
+.PP
+.Vb 1
+\&    curl localhost:8787/anydb/v1/
+.Ve
+.SH "BUGS"
+.IX Header "BUGS"
+In order to report a bug, unexpected behavior, feature requests
+or to submit a patch, please open an issue on github:
+<https://github.com/TLINDEN/anydb/issues>.
+.PP
+Please repeat the failing command with debugging enabled \f(CW\*(C`\-d\*(C'\fR and
+include the output in the issue.
+.SH "LIMITATIONS"
+.IX Header "LIMITATIONS"
+The \s-1REST API\s0 list request doesn't provide any filtering capabilities yet.
 .SH "LICENSE"
 .IX Header "LICENSE"
 This software is licensed under the \s-1GNU GENERAL PUBLIC LICENSE\s0 version 3.
--- a/anydb.pod
+++ b/anydb.pod
@@ -11,14 +11,20 @@ anydb - a personal key value store
    Available Commands:
      completion  Generate the autocompletion script for the specified shell
      del         Delete key
+      edit        Edit a key
      export      Export database to json
      get         Retrieve value for a key
      help        Help about any command
      import      Import database dump
+      info        info
      list        List database contents
+      man         show manual page
+      serve       run REST API listener
      set         Insert key/value pair
    
    Flags:
+      -b, --bucket string   use other bucket (default: data) (default "data")
+      -c, --config string   toml config file
      -f, --dbfile string   DB file to use (default "/home/scip/.config/anydb/default.db")
      -d, --debug           Enable debugging
      -h, --help            help for anydb
@@ -26,11 +32,565 @@ anydb - a personal key value store
    
    Use "anydb [command] --help" for more information about a command.

+
 =head1 DESCRIPTION

-Anydb is a simple to use commandline tool to store anything you'd
-like, even binary files etc. It uses a key/value store (bbolt) in your
-home directory.
+Anydb is a  commandline personal key value store, it  is simple to use
+and  can be  used  to store  anything you'd  like,  even binary  files
+etc. It uses a key/value store (bbolt) in your home directory.
+
+The tool provides a number of subcommands to use it, there are global
+options and each subcommand has its own set of options.
+
+=head1 GLOBAL OPTIONS
+
+=over
+
+=item C<-f, --dbfile filename>
+
+The default location of your databas is
+C<$HOME/.config/anydb/default.db>. You can change this with the C<-f>
+option.
+
+=item C<-b, --bucket name>
+
+Data in a bbolt key-value-store are managed in so called
+buckets. These are kind of namespaces, where each key must be
+unique. However, a database may contain more than one bucket.
+
+By default anydb uses a bucket named "data", but you can change this
+using the option C<-b>.
+
+Buckets can be configured to always encrypt values, see L<ENCRYTPTION>.
+
+=item C<-c, --config filename>
+
+Under normal circumstances you don't need a configuration file. But if
+you want, you can provide one using the option C<-c>.
+
+Anydb looks for a couple of default locations for a config file. You
+only need this option if you want to supply a configuration on a
+non-standard location. See L<CONFIGURATION> for more details.
+
+=item C<-d, --debug>
+
+Enable debug output.
+
+=item C<-h, --help>
+
+Show the usage of anydb.
+
+=item C<-v, --version>
+
+Show the program version.
+
+=back
+
+All of these options can be used with subcommands as well.
+
+=head1 SUBCOMMANDS
+
+=head2 completion
+
+The B<completion> command can be used to setup completion for
+anydb. Just put something like this into your shell's configuration
+file:
+
+    source <(anydb completion bash)
+
+If you use another shell, specify it instead of bash, of course.
+
+=head2 set
+
+The B<set> command is being used to insert or update a key-value pair.
+
+Usage:
+
+    Usage:
+      anydb set <key> [<value> | -r <file>] [-t <tag>] [flags]
+    
+    Aliases:
+      set, add, s, +
+    
+    Flags:
+      -e, --encrypt            encrypt value
+      -r, --file string        Filename or - for STDIN
+      -h, --help               help for set
+      -t, --tags tag,tag,...   tags, multiple allowed
+    
+The standard way to insert a new entry is really simple:
+
+    anydb set key value
+
+If you don't specify a value, anydb expects you to feed it some data
+via STDIN. For example:
+
+    anydb set key < file
+
+You might as well specify a file directly using the C<-f> option:
+
+    anydb set key -f file
+
+Values can be encrypted using B<ChaCha20Poly1305> when you specify the
+C<-e> option. Anydb will ask you interactively for a passphrase. You
+can also provide the passphrase using the environment variable
+C<ANYDB_PASSWORD>. To encrypt the value, a cryptographically secure
+key will be derived from the passphrase using the ArgonID2
+algorithm. Each value can be encrypted with another passphrase. So,
+the database itself is not encrypted, just the values.
+
+You can supply tags by using the option C<-t>. Multiple tags can be
+provided either by separating them with a comma or by using multiple
+C<-t> parameters:
+
+    anydb set key value -t tag1,tag2
+    anydb set key value -t tag1 -t tag2
+
+You can later filter entries by tag or by a combination of tags.
+
+To edit or modify an entry, just use the B<set> command with the same
+key, the value in the database will be overwritten with the new
+value. An alternative option is the B<edit> command, see below.
+
+=head2 get
+
+To retrieve the value of a key, use the B<get> subcommand.
+
+Usage:
+
+    Usage:
+      anydb get  <key> [-o <file>] [-m <mode>] [-n -N] [-T <tpl>] [flags]
+    
+    Aliases:
+      get, show, g, .
+    
+    Flags:
+      -h, --help              help for get
+      -m, --mode string       output format (simple|wide|json|template) (default 'simple')
+      -n, --no-headers        omit headers in tables
+      -N, --no-human          do not translate to human readable values
+      -o, --output string     output value to file (ignores -m)
+      -T, --template string   go template for '-m template'
+
+In its simplest form you just call the B<get> subcommand with the key
+you want to have the value for. The value is being printed to STDOUT
+by default:
+
+    anydb get key
+
+If the  value is binary  content, it will  not just being  printed. In
+those cases you need to either redirect  output into a file or use the
+option C<-o> to write to a file:
+
+    anydb get key > file
+    anydb get key -o file
+
+If the value is encrypted, you will be asked for the passphrase to
+decrypt it. If the environment variable C<ANYDB_PASSWORD> is set, its
+value will be used instead.
+
+There are different output modes you  can choose from: simple, wide and
+json. The "simple"  mode is the default one, it  just prints the value
+as is. The "wide" mode prints  a tabular output similar to the B<list>
+subcommand, see  there for more  details. The options C<-n>  and C<-N>
+have the same  meaning as in the list command.  The "json" mode prints
+the raw  JSON representation of  the whole database  entry. Decryption
+will only take place in "simple"  and "json" mode. The "template" mode
+provides  the   most  flexibily,  it   is  detailed  in   the  section
+L<TEMPLATES>.
+
+=head2 list
+
+The B<list> subcommand displays a list of all database entries.
+
+Usage:
+
+    Usage:
+      anydb list  [<filter-regex> | -t <tag> ] [-m <mode>] [-nNif] [-T <tpl>] [flags]
+    
+    Aliases:
+      list, ls, /, find, search
+    
+    Flags:
+      -i, --case-insensitive   filter case insensitive
+      -h, --help               help for list
+      -m, --mode string        output format (table|wide|json|template), wide is a verbose table. (default 'table')
+      -n, --no-headers         omit headers in tables
+      -N, --no-human           do not translate to human readable values
+      -s, --search-fulltext    perform a full text search
+      -t, --tags stringArray   tags, multiple allowed
+      -T, --template string    go template for '-m template'
+      -l, --wide-output        output mode: wide
+
+In its simplest form - without any options - , the B<list> command
+just prints all keys with their values to STDOUT. Values are being
+truncated to maximum of 60 characters, that is, multiline values are
+not completely shown in order to keep the tabular view readable.
+
+To get more informations about each entry, use the C<-o wide> or C<-l>
+option.  In addition  to  the  key and  value  also  the size,  update
+timestamp and tags will be printed. Time and size values are converted
+into a  human readable form, you  can suppress this behavior  with the
+C<-N> option. You may omit the headers using the option C<-n>
+
+Sometimes you might want to filter the list of entries. Either because
+your database grew too large or because you're searching for
+something. In that case you have two options: You may supply one or
+more tags or provide a filter regexp. To filter by tag, do:
+
+    anydb list -t tag1
+    anydb list -t tag1,tag2
+    anydb list -t tag1 -t tag2
+
+To filter using a regular expression, do:
+
+   anydb list "foo.*bar"
+
+Regular expressions follow the golang B<re2> syntax. For more details
+about the syntax, refer to
+L<https://github.com/google/re2/wiki/Syntax>. Please note, that this
+regexp dialect is not PCRE compatible, but supports most of its
+features.
+
+If you want to search case insensitive, add the option C<-i>.
+
+By default anydb only searches through the keys. If you want to search
+through the values as well, then use the C<-s> option, which enables
+full-text search.
+
+You can - as with the B<get> command - use other output modes. The
+default mode is "table". The "wide" mode is, as already mentioned, a
+more detailed table. Also supported is "json" mode and "template"
+mode. For details about using templates see L<TEMPLATES>.
+
+=head2 del
+
+Use the B<del> command to delete database entries.
+
+Usage:
+
+    Usage:
+      anydb del <key> [flags]
+    
+    Aliases:
+      del, d, rm
+    
+    Flags:
+      -h, --help   help for del
+
+The subcommand  B<del> does not  provide any further options,  it just
+deletes the entry referred to by the given key. No questions are being
+asked.
+
+=head2 edit
+
+The B<edit> command makes it easier to modify larger entries.
+
+Usage:
+
+   Usage:
+      anydb edit <key> [flags]
+    
+    Aliases:
+      edit, modify, mod, ed, vi
+    
+    Flags:
+      -h, --help   help for edit
+
+The subcommand  B<edit> does not  provide any further options. It
+works like this:
+
+=over
+
+=item 1. Write the value info a temporary file.
+
+=item 2. Execute the editor (which one, see below!) with that file.
+
+=item 3. Now you can edit the file and save+close it when done.
+
+=item 4. Anydb picks up the file and if the content has changed, puts its value into the DB.
+
+=back
+
+By default anydb executes the C<vi> command. You can modify this
+behavior by setting the environment variable C<EDITOR> appropriately.
+
+Please note, that this does not work with binary content!
+
+=head2 export
+
+Since the bbolt database file is not portable across platforms (it is
+bound to the endianess of the CPU it was being created on), you might
+want to create a backup file of your database. You can do this with
+the B<export> subcommand.
+
+Usage:
+
+    Usage:
+      anydb export -o <json filename> [flags]
+    
+    Aliases:
+      export, dump, backup
+    
+    Flags:
+      -h, --help            help for export
+      -o, --output string   output to file
+
+The database dump  is a JSON representation of the  whole database and
+will be  printed to the file  specified with the C<-o>  option. If you
+specify "-" as the filename, it will be written to STDIN.
+
+    anydb export -o dump.json
+    anydb export -o - > dump.json
+
+Please note, that encrypted values will not be decrypted. This might
+change in a future version of anydb.
+
+=head2 import
+
+The B<import> subcommand can be used to restore a database from a JSON
+dump.
+
+Usage:
+
+    Usage:
+      anydb import -i <json file> [flags]
+    
+    Aliases:
+      import, restore
+    
+    Flags:
+      -r, --file string        Filename or - for STDIN
+      -h, --help               help for import
+      -t, --tags stringArray   tags, multiple allowed
+
+The C<import> subcommand reads the JSON contents from
+the file specified with the C<-i> option. If you specify "-" as the
+filename, it will be read from STDIN.
+
+    anydb import -i - < dump.json
+    anydb import -i dump.json
+    cat dump.json | anydb import -i -
+
+If there is already a database, it will be saved by appending a
+timestamp and a new database with the contents of the dump will be
+created.
+
+=head2 serve
+
+Anydb provides a RESTful API, which you can use to manage the database
+from somewhere  else. The API  does not provide any  authentication or
+any other security measures, so better only use it on localhost.
+
+Usage:
+
+    Usage:
+      anydb serve [-l host:port] [flags]
+    
+    Flags:
+      -h, --help            help for serve
+      -l, --listen string   host:port (default "localhost:8787")
+
+To start the listener, just execute the B<serve> subcommand. You can
+tweak the ip address and tcp port using the C<-l> option. The listener
+will not fork and run in the foreground. Logs are being printed to
+STDOUT as long as the listener runs.
+
+For more details about the API, please see the L<REST API> section.
+
+=head2 info
+
+The B<info> subcommand shows you some information about your current
+database.
+
+Usage:
+
+    Usage:
+      anydb info [flags]
+    
+    Flags:
+      -h, --help       help for info
+      -N, --no-human   do not translate to human readable values
+
+Data being shown are: filename and size, number of keys per bucket. If
+you supply the C<-d> option (debug), some bbolt internals are being
+displayed as well.
+
+=head2 man
+
+The B<man> subcommand shows an unformatted text variant of the manual
+page (which are currently reading).
+
+Usage:
+
+    Usage:
+      anydb man [flags]
+    
+    Flags:
+      -h, --help   help for man
+
+The manual is being piped into the C<more> command, which is being
+expected to exist according to the POSIX standard on all supported
+unix platforms. It might not work on Windows.
+
+=head1 TEMPLATES
+
+The B<get> and B<list> commands support a template feature, which is
+very handy to create you own kind of formatting. The template syntax
+being used is the GO template language, refer to
+L<https://pkg.go.dev/text/template> for details.
+
+Each template operates on one or more entries, no loop construct is
+required, the template provided applies to every matching entry
+separatley.
+
+The following template variables can be used:
+
+=over
+
+=item B<.Key> - string
+
+=item B<.Value> - string
+
+=item B<.Bin> - []byte
+
+=item B<.Created> - timestamp.Time
+
+To retrieve a string representation of the timestamp, use C<.Created.AsTime>.
+If you need a unix timestamp since epoch, use C<.Created.Unix>.
+
+=item B<.Tags> - []string
+
+=item B<.Encrypted> bool
+
+=back
+
+Prepend a single dot (".") before each variable name.
+
+Here are some examples how to use the feature:
+
+Only show the keys of all entries:
+
+    anydb list -m template -T "{{ .Key }}"
+
+Format the list in a way so that is possible to evaluate it in a
+shell:
+
+    eval $(anydb get foo -m template -T "key='{{ .Key }}' value='{{ .Value }}' ts='{{ .Created.AsTime}}'")
+    echo "Key: $key, Value: $value, When: $ts"
+
+Print the values in CSV format ONLY if they have some tag:
+
+    anydb list -m template -T "{{ if .Tags }}{{ .Key }},{{ .Value }},{{ .Created.AsTime}}{{ end }}"
+
+
+=head1 CONFIGURATION
+
+Anydb looks at the following locations for a configuration file, in
+that order:
+
+=over
+
+=item C<$HOME/.config/anydb/anydb.toml>
+
+=item C<$HOME/.anydb.toml>
+
+=item C<anydb.toml> in the current directory
+
+=item or specify one using C<-c>
+
+=back
+
+The configuration format uses the TOML language, refer to
+L<https://toml.io/en/> for more details. The key names correspond to
+the commandline options in most cases.
+
+Configuration follows a certain precedence: the files are tried to be
+read in the given order, followed by commandline options. That is, the
+last configuration file wins, unless the user provides a commandline
+option, then this setting will be taken.
+
+A complete configuration file might look like this:
+
+    # defaults
+    dbfile     = "~/.config/anydb/default.db"
+    dbbucket   = "data"
+    noheaders  = false
+    nohumanize = false
+    encrypt    = false
+    listen     = "localhost:8787"
+    
+    # different setups for different buckets
+    [buckets.data]
+    encrypt = true
+    
+    [buckets.test]
+    encrypt = false
+
+Under normal circumstances you don't need a configuration
+file. However, if you want to use different buckets, then this might
+be a handy option. Buckets are being configured in ini-style with the
+term "bucket." followed by the bucket name. In the example above we
+enable encryption for the default bucket "data" and disable it for a
+bucket "test". To use different buckets, use the C<-b> option.
+
+
+=head1 REST API
+
+The subcommand B<serve> starts a simple HTTP service, which responds
+to RESTful HTTP requests. The listener responds to all requests with a
+JSON encoded response. The response contains the status and the
+content - if any - of the requested resource.
+
+The following requests are supported:
+
+=over
+
+=item B<GET /anydb/v1/>
+
+Returns a JSON encoded list of all entries.
+
+=item B<GET /anydb/v1/key>
+
+Returns the JSON encoded entry, if found.
+
+=item B<PUT /anydb/v1/>
+
+Create an entry. Expects a JSON encoded request object in POST data.
+
+=item B<DELETE /anydb/v1/key>
+
+Delete an entry.
+
+=back
+
+Some curl example calls to the API: 
+
+Post a new key:
+    curl -X PUT localhost:8787/anydb/v1/ \
+      -H 'Content-Type: application/json' \
+      -d '{"key":"foo","val":"bar"}'
+
+Retrieve the value:
+
+    curl localhost:8787/anydb/v1/foo
+
+List all keys: 
+
+    curl localhost:8787/anydb/v1/
+
+=head1 BUGS
+
+In order to report a bug, unexpected behavior, feature requests
+or to submit a patch, please open an issue on github:
+L<https://github.com/TLINDEN/anydb/issues>.
+
+Please repeat the failing command with debugging enabled C<-d> and
+include the output in the issue.
+
+=head1 LIMITATIONS
+
+The REST API list request doesn't provide any filtering capabilities yet.

 =head1 LICENSE

--- a/app/attr.go
+++ b/app/attr.go
@@ -1,33 +1,56 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
 package app

 import (
 	"fmt"
 	"io"
 	"os"
+	"strings"
 	"unicode/utf8"
 )

 type DbAttr struct {
 	Key       string
-	Val       string
-	Bin       []byte
+	Preview   string
+	Val       []byte
 	Args      []string
 	Tags      []string
 	File      string
 	Encrypted bool
+	Binary    bool
+
+	// conf flags, needed for incoming rest requests
+	Fulltext bool
 }

+// check if value  is to be read  from a file or  stdin, setup preview
+// text according to flags, lowercase key
 func (attr *DbAttr) ParseKV() error {
+	attr.Key = strings.ToLower(attr.Args[0])
+
 	switch len(attr.Args) {
 	case 1:
 		// 1 arg = key + read from file or stdin
-		attr.Key = attr.Args[0]
 		if attr.File == "" {
 			attr.File = "-"
 		}
 	case 2:
-		attr.Key = attr.Args[0]
-		attr.Val = attr.Args[1]
+		attr.Val = []byte(attr.Args[1])

 		if attr.Args[1] == "-" {
 			attr.File = "-"
@@ -35,7 +58,29 @@ func (attr *DbAttr) ParseKV() error {
 	}

 	if attr.File != "" {
-		return attr.GetFileValue()
+		if err := attr.GetFileValue(); err != nil {
+			return err
+		}
+	}
+
+	switch {
+	case attr.Binary:
+		attr.Preview = "<binary-content>"
+	case attr.Encrypted:
+		attr.Preview = "<encrypted-content>"
+	default:
+		if len(attr.Val) > MaxValueWidth {
+			attr.Preview = string(attr.Val)[0:MaxValueWidth] + "..."
+
+			if strings.Contains(attr.Preview, "\n") {
+				parts := strings.Split(attr.Preview, "\n")
+				if len(parts) > 0 {
+					attr.Preview = parts[0]
+				}
+			}
+		} else {
+			attr.Preview = string(attr.Val)
+		}
 	}

 	return nil
@@ -66,11 +111,12 @@ func (attr *DbAttr) GetFileValue() error {
 		}

 		// poor man's text file test
-		sdata := string(data)
-		if utf8.ValidString(sdata) {
-			attr.Val = sdata
+		attr.Val = data
+
+		if utf8.ValidString(string(data)) {
+			attr.Binary = false
 		} else {
-			attr.Bin = data
+			attr.Binary = true
 		}
 	} else {
 		// read from console stdin
@@ -85,7 +131,7 @@ func (attr *DbAttr) GetFileValue() error {
 			data += input + "\n"
 		}

-		attr.Val = data
+		attr.Val = []byte(data)
 	}

 	return nil
--- a/app/crypto.go
+++ b/app/crypto.go
@@ -1,10 +1,26 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
 package app

 import (
 	"crypto/rand"
-	"encoding/base64"
 	"errors"
 	"fmt"
+	"log/slog"
 	"os"
 	"syscall"

@@ -19,7 +35,7 @@ const (
 	ArgonParallel uint8  = 2
 	ArgonSaltLen  int    = 16
 	ArgonKeyLen   uint32 = 32
-	B64SaltLen    int    = 22
+	B64SaltLen    int    = 16 //22
 )

 type Key struct {
@@ -69,7 +85,11 @@ func DeriveKey(password []byte, salt []byte) (*Key, error) {
 		ArgonKeyLen,
 	)

-	return &Key{Key: hash, Salt: salt}, nil
+	key := &Key{Key: hash, Salt: salt}
+
+	slog.Debug("derived key", "key", string(key.Key), "salt", string(key.Salt))
+
+	return key, nil
 }

 // Retrieve a random chunk of given size
@@ -88,7 +108,7 @@ func GetRandom(size int, capacity int) ([]byte, error) {
 // modifying it.
 //
 // The cipher text consists of:
-// base64(password-salt) + base64(12 byte nonce + ciphertext + 16 byte mac)
+// password-salt) + (12 byte nonce + ciphertext + 16 byte mac)
 func Encrypt(pass []byte, attr *DbAttr) error {
 	key, err := DeriveKey(pass, nil)
 	if err != nil {
@@ -100,47 +120,38 @@ func Encrypt(pass []byte, attr *DbAttr) error {
 		return fmt.Errorf("failed to create AEAD cipher: %w", err)
 	}

-	var plain []byte
-	if attr.Val != "" {
-		plain = []byte(attr.Val)
-	} else {
-		plain = attr.Bin
-	}
-
-	total := aead.NonceSize() + len(plain) + aead.Overhead()
+	total := aead.NonceSize() + len(attr.Val) + aead.Overhead()

 	nonce, err := GetRandom(aead.NonceSize(), total)
 	if err != nil {
 		return err
 	}

-	cipher := aead.Seal(nonce, nonce, plain, nil)
+	cipher := aead.Seal(nonce, nonce, attr.Val, nil)

-	attr.Bin = nil
-	attr.Val = base64.RawStdEncoding.EncodeToString(key.Salt) +
-		base64.RawStdEncoding.EncodeToString(cipher)
+	attr.Val = key.Salt
+	attr.Val = append(attr.Val, cipher...)

 	attr.Encrypted = true
+	attr.Preview = "<encrypted-content>"
+
+	slog.Debug("encrypted attr", "salt", string(key.Salt), "cipher", string(attr.Val))

 	return nil
 }

 // Do the reverse
-func Decrypt(pass []byte, cipherb64 string) ([]byte, error) {
-	salt, err := base64.RawStdEncoding.Strict().DecodeString(cipherb64[0:B64SaltLen])
-	if err != nil {
-		return nil, fmt.Errorf("failed to encode to base64: %w", err)
+func Decrypt(pass []byte, cipherb []byte) ([]byte, error) {
+	if len(cipherb) < B64SaltLen {
+		return nil, fmt.Errorf("encrypted cipher block too small")
 	}

-	key, err := DeriveKey(pass, salt)
+	key, err := DeriveKey(pass, cipherb[0:B64SaltLen])
 	if err != nil {
 		return nil, err
 	}

-	cipher, err := base64.RawStdEncoding.Strict().DecodeString(cipherb64[B64SaltLen:])
-	if err != nil {
-		return nil, fmt.Errorf("failed to encode to base64: %w", err)
-	}
+	cipher := cipherb[B64SaltLen:]

 	aead, err := chacha20poly1305.New(key.Key)
 	if err != nil {
@@ -153,5 +164,12 @@ func Decrypt(pass []byte, cipherb64 string) ([]byte, error) {

 	nonce, ciphertext := cipher[:aead.NonceSize()], cipher[aead.NonceSize():]

-	return aead.Open(nil, nonce, ciphertext, nil)
+	clear, err := aead.Open(nil, nonce, ciphertext, nil)
+	if err != nil {
+		return nil, err
+	}
+
+	slog.Debug("decrypted attr", "salt", string(key.Salt), "clear", string(clear))
+
+	return clear, err
 }
--- a/app/db.go
+++ b/app/db.go
@@ -1,9 +1,26 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
 package app

 import (
 	"encoding/json"
 	"errors"
 	"fmt"
+	"log/slog"
 	"os"
 	"path/filepath"
 	"regexp"
@@ -11,37 +28,76 @@ import (
 	"time"

 	bolt "go.etcd.io/bbolt"
+	"google.golang.org/protobuf/proto"
+	timestamppb "google.golang.org/protobuf/types/known/timestamppb"
 )

+const MaxValueWidth int = 60
+
 type DB struct {
 	Debug  bool
 	Dbfile string
+	Bucket string
 	DB     *bolt.DB
 }

-type DbEntry struct {
-	Id        string    `json:"id"`
-	Key       string    `json:"key"`
-	Value     string    `json:"value"`
-	Encrypted bool      `json:"encrypted"`
-	Bin       []byte    `json:"bin"`
-	Tags      []string  `json:"tags"`
-	Created   time.Time `json:"created"`
+type BucketInfo struct {
+	Name     string
+	Keys     int
+	Size     int
+	Sequence uint64
+	Stats    bolt.BucketStats
 }

-type DbEntries []DbEntry
+type DbInfo struct {
+	Buckets []BucketInfo
+	Path    string
+}
+
+type DbEntries []*DbEntry

 type DbTag struct {
 	Keys []string `json:"key"`
 }

+// required for ui
+func (entry DbEntry) FilterValue() string {
+	return entry.Preview
+}
+func (entry DbEntry) Description() string {
+	return "Val: " + entry.Preview
+}
+func (entry DbEntry) Title() string {
+	return "Key: " + entry.Key
+}
+
 const BucketData string = "data"

-func New(file string, debug bool) (*DB, error) {
-	return &DB{Debug: debug, Dbfile: file}, nil
+func GetDbFile(file string) string {
+	if file != "" {
+		return file
+	}
+
+	file = os.Getenv("ANYDB_DB")
+	if file != "" {
+		return file
+	}
+
+	home, err := os.UserHomeDir()
+	if err != nil {
+		panic(err)
+	}
+
+	return filepath.Join(home, ".config", "anydb", "default.db")
+}
+
+func New(file string, bucket string, debug bool) (*DB, error) {
+	return &DB{Debug: debug, Dbfile: file, Bucket: bucket}, nil
 }

 func (db *DB) Open() error {
+	slog.Debug("opening DB", "dbfile", db.Dbfile)
+
 	if _, err := os.Stat(filepath.Dir(db.Dbfile)); os.IsNotExist(err) {
 		if err := os.MkdirAll(filepath.Dir(db.Dbfile), 0700); err != nil {
 			return err
@@ -61,7 +117,7 @@ func (db *DB) Close() error {
 	return db.DB.Close()
 }

-func (db *DB) List(attr *DbAttr) (DbEntries, error) {
+func (db *DB) List(attr *DbAttr, fulltext bool) (DbEntries, error) {
 	if err := db.Open(); err != nil {
 		return nil, err
 	}
@@ -71,31 +127,63 @@ func (db *DB) List(attr *DbAttr) (DbEntries, error) {
 	var filter *regexp.Regexp

 	if len(attr.Args) > 0 {
+		// via cli
 		filter = regexp.MustCompile(attr.Args[0])
 	}

-	err := db.DB.View(func(tx *bolt.Tx) error {
+	if len(attr.Key) > 0 {
+		// via api
+		filter = regexp.MustCompile(attr.Key)
+	}

-		bucket := tx.Bucket([]byte(BucketData))
+	err := db.DB.View(func(tx *bolt.Tx) error {
+		root := tx.Bucket([]byte(db.Bucket))
+		if root == nil {
+			return nil
+		}
+
+		slog.Debug("opened root bucket", "root", root)
+
+		bucket := root.Bucket([]byte("meta"))
 		if bucket == nil {
 			return nil
 		}

-		err := bucket.ForEach(func(key, jsonentry []byte) error {
+		slog.Debug("opened buckets", "root", root, "data", bucket)
+
+		databucket := root.Bucket([]byte("data"))
+		if databucket == nil {
+			return fmt.Errorf("failed to retrieve data sub bucket")
+		}
+
+		err := bucket.ForEach(func(key, pbentry []byte) error {
 			var entry DbEntry
-			if err := json.Unmarshal(jsonentry, &entry); err != nil {
-				return fmt.Errorf("failed to unmarshal from json: %w", err)
+			if err := proto.Unmarshal(pbentry, &entry); err != nil {
+				return fmt.Errorf("failed to unmarshal from protobuf: %w", err)
+			}
+
+			if fulltext {
+				// avoid crash due to access fault
+				value := databucket.Get([]byte(entry.Key)) // empty is ok
+				vc := make([]byte, len(value))
+				copy(vc, value)
+				entry.Value = string(vc)
 			}

 			var include bool

 			switch {
 			case filter != nil:
-				if filter.MatchString(entry.Value) ||
-					filter.MatchString(entry.Key) ||
+				if filter.MatchString(entry.Key) ||
 					filter.MatchString(strings.Join(entry.Tags, " ")) {
 					include = true
 				}
+
+				if !entry.Binary && !include && fulltext {
+					if filter.MatchString(string(entry.Value)) {
+						include = true
+					}
+				}
 			case len(attr.Tags) > 0:
 				for _, search := range attr.Tags {
 					for _, tag := range entry.Tags {
@@ -114,7 +202,7 @@ func (db *DB) List(attr *DbAttr) (DbEntries, error) {
 			}

 			if include {
-				entries = append(entries, entry)
+				entries = append(entries, &entry)
 			}

 			return nil
@@ -122,6 +210,7 @@ func (db *DB) List(attr *DbAttr) (DbEntries, error) {

 		return err
 	})
+
 	return entries, err
 }

@@ -133,30 +222,39 @@ func (db *DB) Set(attr *DbAttr) error {

 	entry := DbEntry{
 		Key:       attr.Key,
-		Value:     attr.Val,
-		Bin:       attr.Bin,
+		Binary:    attr.Binary,
 		Tags:      attr.Tags,
 		Encrypted: attr.Encrypted,
-		Created:   time.Now(),
+		Created:   timestamppb.Now(),
+		Size:      uint64(len(attr.Val)),
+		Preview:   attr.Preview,
 	}

 	// check if the  entry already exists and if yes,  check if it has
 	// any  tags. if so,  we initialize  our update struct  with these
 	// tags unless it has new tags configured.
+	// FIXME: use Get()
 	err := db.DB.View(func(tx *bolt.Tx) error {
-		bucket := tx.Bucket([]byte(BucketData))
+		root := tx.Bucket([]byte(db.Bucket))
+		if root == nil {
+			return nil
+		}
+
+		bucket := root.Bucket([]byte("meta"))
 		if bucket == nil {
 			return nil
 		}

-		jsonentry := bucket.Get([]byte(entry.Key))
-		if jsonentry == nil {
+		slog.Debug("opened buckets", "root", root, "data", bucket)
+
+		pbentry := bucket.Get([]byte(entry.Key))
+		if pbentry == nil {
 			return nil
 		}

 		var oldentry DbEntry
-		if err := json.Unmarshal(jsonentry, &oldentry); err != nil {
-			return fmt.Errorf("failed to unmarshal from json: %w", err)
+		if err := proto.Unmarshal(pbentry, &oldentry); err != nil {
+			return fmt.Errorf("failed to unmarshal from protobuf: %w", err)
 		}

 		if len(oldentry.Tags) > 0 && len(entry.Tags) == 0 {
@@ -171,19 +269,41 @@ func (db *DB) Set(attr *DbAttr) error {
 		return err
 	}

+	// marshall our data
+	pbentry, err := proto.Marshal(&entry)
+	if err != nil {
+		return fmt.Errorf("failed to marshall protobuf: %w", err)
+	}
+
 	err = db.DB.Update(func(tx *bolt.Tx) error {
-		// insert data
-		bucket, err := tx.CreateBucketIfNotExists([]byte(BucketData))
+		// create root bucket
+		root, err := tx.CreateBucketIfNotExists([]byte(db.Bucket))
 		if err != nil {
 			return fmt.Errorf("failed to create DB bucket: %w", err)
 		}

-		jsonentry, err := json.Marshal(entry)
+		// create meta bucket
+		bucket, err := root.CreateBucketIfNotExists([]byte("meta"))
 		if err != nil {
-			return fmt.Errorf("failed to marshall json: %w", err)
+			return fmt.Errorf("failed to create DB meta sub bucket: %w", err)
 		}

-		err = bucket.Put([]byte(entry.Key), []byte(jsonentry))
+		slog.Debug("opened/created buckets", "root", root, "data", bucket)
+
+		// write meta data
+		err = bucket.Put([]byte(entry.Key), []byte(pbentry))
+		if err != nil {
+			return fmt.Errorf("failed to insert data: %w", err)
+		}
+
+		// create data bucket
+		databucket, err := root.CreateBucketIfNotExists([]byte("data"))
+		if err != nil {
+			return fmt.Errorf("failed to create DB data sub bucket: %w", err)
+		}
+
+		// write value
+		err = databucket.Put([]byte(entry.Key), attr.Val)
 		if err != nil {
 			return fmt.Errorf("failed to insert data: %w", err)
 		}
@@ -207,20 +327,50 @@ func (db *DB) Get(attr *DbAttr) (*DbEntry, error) {
 	entry := DbEntry{}

 	err := db.DB.View(func(tx *bolt.Tx) error {
-		bucket := tx.Bucket([]byte(BucketData))
+		// root bucket
+		root := tx.Bucket([]byte(db.Bucket))
+		if root == nil {
+			return nil
+		}
+
+		// get meta sub bucket
+		bucket := root.Bucket([]byte("meta"))
 		if bucket == nil {
 			return nil
 		}

-		jsonentry := bucket.Get([]byte(attr.Key))
-		if jsonentry == nil {
-			return nil
+		slog.Debug("opened buckets", "root", root, "data", bucket)
+
+		// retrieve meta data
+		pbentry := bucket.Get([]byte(attr.Key))
+		if pbentry == nil {
+			return fmt.Errorf("no such key: %s", attr.Key)
 		}

-		if err := json.Unmarshal(jsonentry, &entry); err != nil {
-			return fmt.Errorf("failed to unmarshal from json: %w", err)
+		// put into struct
+		if err := proto.Unmarshal(pbentry, &entry); err != nil {
+			return fmt.Errorf("failed to unmarshal from protobuf: %w", err)
 		}

+		// get data sub bucket
+		databucket := root.Bucket([]byte("data"))
+		if databucket == nil {
+			return fmt.Errorf("failed to retrieve data sub bucket")
+		}
+
+		// retrieve actual data value
+		value := databucket.Get([]byte(attr.Key))
+		if len(value) == 0 {
+			return fmt.Errorf("no such key: %s", attr.Key)
+		}
+
+		// we  need to make a  copy of it, otherwise  we'll get an
+		// "unexpected fault address" error
+		vc := make([]byte, len(value))
+		copy(vc, value)
+
+		entry.Value = string(vc)
+
 		return nil
 	})

@@ -238,26 +388,28 @@ func (db *DB) Del(attr *DbAttr) error {
 	defer db.Close()

 	err := db.DB.Update(func(tx *bolt.Tx) error {
-		bucket := tx.Bucket([]byte(BucketData))
+		bucket := tx.Bucket([]byte(db.Bucket))

 		if bucket == nil {
 			return nil
 		}

+		slog.Debug("opened buckets", "data", bucket)
+
 		return bucket.Delete([]byte(attr.Key))
 	})

 	return err
 }

-func (db *DB) Import(attr *DbAttr) error {
+func (db *DB) Import(attr *DbAttr) (string, error) {
 	// open json file into attr.Val
 	if err := attr.GetFileValue(); err != nil {
-		return err
+		return "", err
 	}

-	if attr.Val == "" {
-		return errors.New("empty json file")
+	if len(attr.Val) == 0 {
+		return "", errors.New("empty json file")
 	}

 	var entries DbEntries
@@ -265,69 +417,170 @@ func (db *DB) Import(attr *DbAttr) error {
 	newfile := db.Dbfile + now.Format("-02.01.2006T03:04.05")

 	if err := json.Unmarshal([]byte(attr.Val), &entries); err != nil {
-		return cleanError(newfile, fmt.Errorf("failed to unmarshal json: %w", err))
+		return "", cleanError(newfile, fmt.Errorf("failed to unmarshal json: %w", err))
 	}

 	if fileExists(db.Dbfile) {
 		// backup the old file
 		err := os.Rename(db.Dbfile, newfile)
 		if err != nil {
-			return fmt.Errorf("failed to rename file %s to %s: %w", db.Dbfile, newfile, err)
+			return "", fmt.Errorf("failed to rename file %s to %s: %w", db.Dbfile, newfile, err)
 		}

 	}

 	// should now be a new db file
 	if err := db.Open(); err != nil {
-		return cleanError(newfile, err)
+		return "", cleanError(newfile, err)
 	}
 	defer db.Close()

 	err := db.DB.Update(func(tx *bolt.Tx) error {
-		// insert data
-		bucket, err := tx.CreateBucketIfNotExists([]byte(BucketData))
+		// create root bucket
+		root, err := tx.CreateBucketIfNotExists([]byte(db.Bucket))
 		if err != nil {
-			return fmt.Errorf("failed to create bucket: %w", err)
+			return fmt.Errorf("failed to create DB bucket: %w", err)
 		}

+		// create meta bucket
+		bucket, err := root.CreateBucketIfNotExists([]byte("meta"))
+		if err != nil {
+			return fmt.Errorf("failed to create DB meta sub bucket: %w", err)
+		}
+
+		slog.Debug("opened buckets", "root", root, "data", bucket)
+
 		for _, entry := range entries {
-			jsonentry, err := json.Marshal(entry)
+			pbentry, err := proto.Marshal(entry)
 			if err != nil {
-				return fmt.Errorf("failed to marshall json: %w", err)
+				return fmt.Errorf("failed to marshall protobuf: %w", err)
 			}

-			err = bucket.Put([]byte(entry.Key), []byte(jsonentry))
+			// write meta data
+			err = bucket.Put([]byte(entry.Key), []byte(pbentry))
 			if err != nil {
 				return fmt.Errorf("failed to insert data into DB: %w", err)
 			}
+
+			// create data bucket
+			databucket, err := root.CreateBucketIfNotExists([]byte("data"))
+			if err != nil {
+				return fmt.Errorf("failed to create DB data sub bucket: %w", err)
+			}
+
+			// write value
+			err = databucket.Put([]byte(entry.Key), []byte(entry.Value))
+			if err != nil {
+				return fmt.Errorf("failed to insert data: %w", err)
+			}
 		}

 		return nil
 	})

 	if err != nil {
-		return cleanError(newfile, err)
+		return "", cleanError(newfile, err)
 	}

-	fmt.Printf("backed up database file to %s\n", newfile)
-	fmt.Printf("imported %d database entries\n", len(entries))
+	return fmt.Sprintf("backed up database file to %s\nimported %d database entries\n",
+		newfile, len(entries)), nil
+}

+func (db *DB) Info() (*DbInfo, error) {
+	if err := db.Open(); err != nil {
+		return nil, err
+	}
+	defer db.Close()
+
+	info := &DbInfo{Path: db.Dbfile}
+
+	err := db.DB.View(func(tx *bolt.Tx) error {
+		err := tx.ForEach(func(name []byte, bucket *bolt.Bucket) error {
+			stats := bucket.Stats()
+
+			binfo := BucketInfo{
+				Name:     string(name),
+				Sequence: bucket.Sequence(),
+				Keys:     stats.KeyN,
+				Stats:    bucket.Stats(),
+			}
+
+			err := bucket.ForEach(func(key, entry []byte) error {
+				binfo.Size += len(entry) + len(key)
+
+				return nil
+			})
+			if err != nil {
+				return fmt.Errorf("failed to read keys: %w", err)
+			}
+
+			info.Buckets = append(info.Buckets, binfo)
+			return nil
+
+		})
+
+		if err != nil {
+			return fmt.Errorf("failed to read from DB: %w", err)
+		}
+
+		return nil
+
+	})
+
+	return info, err
+}
+
+func (db *DB) Getall(attr *DbAttr) (DbEntries, error) {
+	if err := db.Open(); err != nil {
+		return nil, err
+	}
+	defer db.Close()
+
+	var entries DbEntries
+
+	err := db.DB.View(func(tx *bolt.Tx) error {
+		// root bucket
+		root := tx.Bucket([]byte(db.Bucket))
+		if root == nil {
 			return nil
 		}

-func cleanError(file string, err error) error {
-	// remove given [backup] file and forward the given error
-	os.Remove(file)
+		// get meta sub bucket
+		bucket := root.Bucket([]byte("meta"))
+		if bucket == nil {
+			return nil
+		}
+
+		// get data sub bucket
+		databucket := root.Bucket([]byte("data"))
+		if databucket == nil {
+			return fmt.Errorf("failed to retrieve data sub bucket")
+		}
+
+		slog.Debug("opened buckets", "root", root, "data", bucket)
+
+		// iterate over all db entries in meta sub bucket
+		err := bucket.ForEach(func(key, pbentry []byte) error {
+			var entry DbEntry
+			if err := proto.Unmarshal(pbentry, &entry); err != nil {
+				return fmt.Errorf("failed to unmarshal from protobuf: %w", err)
+			}
+
+			// retrieve the value from the data sub bucket
+			value := databucket.Get([]byte(entry.Key))
+
+			// we  need to make a  copy of it, otherwise  we'll get an
+			// "unexpected fault address" error
+			vc := make([]byte, len(value))
+			copy(vc, value)
+
+			entry.Value = string(vc)
+			entries = append(entries, &entry)
+
+			return nil
+		})
+
 		return err
-}
-
-func fileExists(filename string) bool {
-	info, err := os.Stat(filename)
-
-	if err != nil {
-		// return false on any error
-		return false
-	}
-
-	return !info.IsDir()
+	})
+	return entries, err
 }
--- a/app/dbentry.pb.go
+++ b/app/dbentry.pb.go
@@ -0,0 +1,210 @@
+// -*-c++-*-
+
+// Code generated by protoc-gen-go. DO NOT EDIT.
+// versions:
+// 	protoc-gen-go v1.36.1
+// 	protoc        v3.21.12
+// source: app/dbentry.proto
+
+package app
+
+import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	timestamppb "google.golang.org/protobuf/types/known/timestamppb"
+	reflect "reflect"
+	sync "sync"
+)
+
+const (
+	// Verify that this generated code is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
+	// Verify that runtime/protoimpl is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
+)
+
+type DbEntry struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Id            string                 `protobuf:"bytes,1,opt,name=Id,proto3" json:"Id,omitempty"`
+	Key           string                 `protobuf:"bytes,2,opt,name=Key,proto3" json:"Key,omitempty"`
+	Preview       string                 `protobuf:"bytes,3,opt,name=Preview,proto3" json:"Preview,omitempty"`
+	Tags          []string               `protobuf:"bytes,4,rep,name=Tags,proto3" json:"Tags,omitempty"`
+	Created       *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=Created,proto3" json:"Created,omitempty"`
+	Size          uint64                 `protobuf:"varint,6,opt,name=Size,proto3" json:"Size,omitempty"`
+	Encrypted     bool                   `protobuf:"varint,7,opt,name=Encrypted,proto3" json:"Encrypted,omitempty"`
+	Binary        bool                   `protobuf:"varint,8,opt,name=Binary,proto3" json:"Binary,omitempty"`
+	Value         string                 `protobuf:"bytes,9,opt,name=Value,proto3" json:"Value,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *DbEntry) Reset() {
+	*x = DbEntry{}
+	mi := &file_app_dbentry_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *DbEntry) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DbEntry) ProtoMessage() {}
+
+func (x *DbEntry) ProtoReflect() protoreflect.Message {
+	mi := &file_app_dbentry_proto_msgTypes[0]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DbEntry.ProtoReflect.Descriptor instead.
+func (*DbEntry) Descriptor() ([]byte, []int) {
+	return file_app_dbentry_proto_rawDescGZIP(), []int{0}
+}
+
+func (x *DbEntry) GetId() string {
+	if x != nil {
+		return x.Id
+	}
+	return ""
+}
+
+func (x *DbEntry) GetKey() string {
+	if x != nil {
+		return x.Key
+	}
+	return ""
+}
+
+func (x *DbEntry) GetPreview() string {
+	if x != nil {
+		return x.Preview
+	}
+	return ""
+}
+
+func (x *DbEntry) GetTags() []string {
+	if x != nil {
+		return x.Tags
+	}
+	return nil
+}
+
+func (x *DbEntry) GetCreated() *timestamppb.Timestamp {
+	if x != nil {
+		return x.Created
+	}
+	return nil
+}
+
+func (x *DbEntry) GetSize() uint64 {
+	if x != nil {
+		return x.Size
+	}
+	return 0
+}
+
+func (x *DbEntry) GetEncrypted() bool {
+	if x != nil {
+		return x.Encrypted
+	}
+	return false
+}
+
+func (x *DbEntry) GetBinary() bool {
+	if x != nil {
+		return x.Binary
+	}
+	return false
+}
+
+func (x *DbEntry) GetValue() string {
+	if x != nil {
+		return x.Value
+	}
+	return ""
+}
+
+var File_app_dbentry_proto protoreflect.FileDescriptor
+
+var file_app_dbentry_proto_rawDesc = []byte{
+	0x0a, 0x11, 0x61, 0x70, 0x70, 0x2f, 0x64, 0x62, 0x65, 0x6e, 0x74, 0x72, 0x79, 0x2e, 0x70, 0x72,
+	0x6f, 0x74, 0x6f, 0x12, 0x03, 0x61, 0x70, 0x70, 0x1a, 0x1f, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
+	0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2f, 0x74, 0x69, 0x6d, 0x65, 0x73, 0x74,
+	0x61, 0x6d, 0x70, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22, 0xef, 0x01, 0x0a, 0x07, 0x44, 0x62,
+	0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x0e, 0x0a, 0x02, 0x49, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x09, 0x52, 0x02, 0x49, 0x64, 0x12, 0x10, 0x0a, 0x03, 0x4b, 0x65, 0x79, 0x18, 0x02, 0x20, 0x01,
+	0x28, 0x09, 0x52, 0x03, 0x4b, 0x65, 0x79, 0x12, 0x18, 0x0a, 0x07, 0x50, 0x72, 0x65, 0x76, 0x69,
+	0x65, 0x77, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x07, 0x50, 0x72, 0x65, 0x76, 0x69, 0x65,
+	0x77, 0x12, 0x12, 0x0a, 0x04, 0x54, 0x61, 0x67, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x09, 0x52,
+	0x04, 0x54, 0x61, 0x67, 0x73, 0x12, 0x34, 0x0a, 0x07, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x64,
+	0x18, 0x05, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
+	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x54, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61,
+	0x6d, 0x70, 0x52, 0x07, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x64, 0x12, 0x12, 0x0a, 0x04, 0x53,
+	0x69, 0x7a, 0x65, 0x18, 0x06, 0x20, 0x01, 0x28, 0x04, 0x52, 0x04, 0x53, 0x69, 0x7a, 0x65, 0x12,
+	0x1c, 0x0a, 0x09, 0x45, 0x6e, 0x63, 0x72, 0x79, 0x70, 0x74, 0x65, 0x64, 0x18, 0x07, 0x20, 0x01,
+	0x28, 0x08, 0x52, 0x09, 0x45, 0x6e, 0x63, 0x72, 0x79, 0x70, 0x74, 0x65, 0x64, 0x12, 0x16, 0x0a,
+	0x06, 0x42, 0x69, 0x6e, 0x61, 0x72, 0x79, 0x18, 0x08, 0x20, 0x01, 0x28, 0x08, 0x52, 0x06, 0x42,
+	0x69, 0x6e, 0x61, 0x72, 0x79, 0x12, 0x14, 0x0a, 0x05, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x09,
+	0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x1e, 0x5a, 0x1c, 0x67,
+	0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x74, 0x6c, 0x69, 0x6e, 0x64, 0x65,
+	0x6e, 0x2f, 0x61, 0x6e, 0x79, 0x64, 0x62, 0x2f, 0x61, 0x70, 0x70, 0x62, 0x06, 0x70, 0x72, 0x6f,
+	0x74, 0x6f, 0x33,
+}
+
+var (
+	file_app_dbentry_proto_rawDescOnce sync.Once
+	file_app_dbentry_proto_rawDescData = file_app_dbentry_proto_rawDesc
+)
+
+func file_app_dbentry_proto_rawDescGZIP() []byte {
+	file_app_dbentry_proto_rawDescOnce.Do(func() {
+		file_app_dbentry_proto_rawDescData = protoimpl.X.CompressGZIP(file_app_dbentry_proto_rawDescData)
+	})
+	return file_app_dbentry_proto_rawDescData
+}
+
+var file_app_dbentry_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
+var file_app_dbentry_proto_goTypes = []any{
+	(*DbEntry)(nil),               // 0: app.DbEntry
+	(*timestamppb.Timestamp)(nil), // 1: google.protobuf.Timestamp
+}
+var file_app_dbentry_proto_depIdxs = []int32{
+	1, // 0: app.DbEntry.Created:type_name -> google.protobuf.Timestamp
+	1, // [1:1] is the sub-list for method output_type
+	1, // [1:1] is the sub-list for method input_type
+	1, // [1:1] is the sub-list for extension type_name
+	1, // [1:1] is the sub-list for extension extendee
+	0, // [0:1] is the sub-list for field type_name
+}
+
+func init() { file_app_dbentry_proto_init() }
+func file_app_dbentry_proto_init() {
+	if File_app_dbentry_proto != nil {
+		return
+	}
+	type x struct{}
+	out := protoimpl.TypeBuilder{
+		File: protoimpl.DescBuilder{
+			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
+			RawDescriptor: file_app_dbentry_proto_rawDesc,
+			NumEnums:      0,
+			NumMessages:   1,
+			NumExtensions: 0,
+			NumServices:   0,
+		},
+		GoTypes:           file_app_dbentry_proto_goTypes,
+		DependencyIndexes: file_app_dbentry_proto_depIdxs,
+		MessageInfos:      file_app_dbentry_proto_msgTypes,
+	}.Build()
+	File_app_dbentry_proto = out.File
+	file_app_dbentry_proto_rawDesc = nil
+	file_app_dbentry_proto_goTypes = nil
+	file_app_dbentry_proto_depIdxs = nil
+}
--- a/app/dbentry.proto
+++ b/app/dbentry.proto
@@ -0,0 +1,20 @@
+// -*-c++-*-
+
+syntax = "proto3";
+package app;
+
+import "google/protobuf/timestamp.proto";
+
+option go_package = "github.com/tlinden/anydb/app";
+
+message DbEntry {
+  string Id = 1;
+  string Key = 2;
+  string Preview = 3;
+  repeated string Tags = 4;
+  google.protobuf.Timestamp Created = 5;
+  uint64 Size = 6;
+  bool Encrypted = 7;
+  bool Binary = 8;
+  string Value = 9;
+}
--- a/app/generic.go
+++ b/app/generic.go
@@ -1,3 +1,19 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
 package app

 // look if a key in a map exists, generic variant
--- a/app/io.go
+++ b/app/io.go
@@ -0,0 +1,36 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+package app
+
+import "os"
+
+func cleanError(file string, err error) error {
+	// remove given [backup] file and forward the given error
+	os.Remove(file)
+	return err
+}
+
+func fileExists(filename string) bool {
+	info, err := os.Stat(filename)
+
+	if err != nil {
+		// return false on any error
+		return false
+	}
+
+	return !info.IsDir()
+}
--- a/cfg/config.go
+++ b/cfg/config.go
@@ -1,16 +1,116 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
 package cfg

-import "github.com/tlinden/anydb/app"
+import (
+	"fmt"
+	"io"
+	"os"

-var Version string = "v0.0.2"
+	"github.com/pelletier/go-toml"
+	"github.com/tlinden/anydb/app"
+	"github.com/tlinden/anydb/common"
+)
+
+var Version string = "v0.2.0"
+
+type BucketConfig struct {
+	Encrypt bool
+}

 type Config struct {
 	Debug           bool
 	Dbfile          string
+	Dbbucket        string
+	Template        string
 	Mode            string // wide, table, yaml, json
 	NoHeaders       bool
-	Encrypt   bool
-	DB        *app.DB
-	File      string
-	Tags      []string
+	NoHumanize      bool
+	Encrypt         bool // one entry
+	CaseInsensitive bool
+	Fulltext        bool
+	Listen          string
+	Buckets         map[string]BucketConfig // config file only
+
+	Tags []string // internal
+	DB   *app.DB  // internal
+	File string   // internal
+}
+
+func (conf *Config) GetConfig(files []string) error {
+	for _, file := range files {
+		if err := conf.ParseConfigFile(file); err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
+func (conf *Config) ParseConfigFile(file string) error {
+	if !common.FileExists(file) {
+		return nil
+	}
+
+	fd, err := os.OpenFile(file, os.O_RDONLY, 0600)
+	if err != nil {
+		return fmt.Errorf("failed to open config file %s: %w", file, err)
+	}
+
+	data, err := io.ReadAll(fd)
+	if err != nil {
+		return fmt.Errorf("failed to read from config file: %w", err)
+	}
+
+	add := Config{}
+	err = toml.Unmarshal(data, &add)
+	if err != nil {
+		return fmt.Errorf("failed to unmarshall toml: %w", err)
+	}
+
+	// merge new values into existing config
+	switch {
+	case add.Debug != conf.Debug:
+		conf.Debug = add.Debug
+	case add.Dbfile != "":
+		conf.Dbfile = add.Dbfile
+	case add.Dbbucket != "":
+		conf.Dbbucket = add.Dbbucket
+	case add.Template != "":
+		conf.Template = add.Template
+	case add.NoHeaders != conf.NoHeaders:
+		conf.NoHeaders = add.NoHeaders
+	case add.NoHumanize != conf.NoHumanize:
+		conf.NoHumanize = add.NoHumanize
+	case add.Encrypt != conf.Encrypt:
+		conf.Encrypt = add.Encrypt
+	case add.Listen != "":
+		conf.Listen = add.Listen
+	}
+
+	// only supported in config files
+	conf.Buckets = add.Buckets
+
+	// determine bucket encryption mode
+	for name, bucket := range conf.Buckets {
+		if name == conf.Dbbucket {
+			conf.Encrypt = bucket.Encrypt
+		}
+	}
+
+	return nil
 }
--- a/cmd/anydb.go
+++ b/cmd/anydb.go
@@ -12,14 +12,20 @@ SYNOPSIS
        Available Commands:
          completion  Generate the autocompletion script for the specified shell
          del         Delete key
+          edit        Edit a key
          export      Export database to json
          get         Retrieve value for a key
          help        Help about any command
          import      Import database dump
+          info        info
          list        List database contents
+          man         show manual page
+          serve       run REST API listener
          set         Insert key/value pair
    
        Flags:
+          -b, --bucket string   use other bucket (default: data) (default "data")
+          -c, --config string   toml config file
          -f, --dbfile string   DB file to use (default "/home/scip/.config/anydb/default.db")
          -d, --debug           Enable debugging
          -h, --help            help for anydb
@@ -28,9 +34,497 @@ SYNOPSIS
        Use "anydb [command] --help" for more information about a command.

 DESCRIPTION
-    Anydb is a simple to use commandline tool to store anything you'd like,
-    even binary files etc. It uses a key/value store (bbolt) in your home
-    directory.
+    Anydb is a commandline personal key value store, it is simple to use and
+    can be used to store anything you'd like, even binary files etc. It uses
+    a key/value store (bbolt) in your home directory.
+
+    The tool provides a number of subcommands to use it, there are global
+    options and each subcommand has its own set of options.
+
+GLOBAL OPTIONS
+    "-f, --dbfile filename"
+        The default location of your databas is
+        "$HOME/.config/anydb/default.db". You can change this with the "-f"
+        option.
+
+    "-b, --bucket name"
+        Data in a bbolt key-value-store are managed in so called buckets.
+        These are kind of namespaces, where each key must be unique.
+        However, a database may contain more than one bucket.
+
+        By default anydb uses a bucket named "data", but you can change this
+        using the option "-b".
+
+        Buckets can be configured to always encrypt values, see ENCRYTPTION.
+
+    "-c, --config filename"
+        Under normal circumstances you don't need a configuration file. But
+        if you want, you can provide one using the option "-c".
+
+        Anydb looks for a couple of default locations for a config file. You
+        only need this option if you want to supply a configuration on a
+        non-standard location. See CONFIGURATION for more details.
+
+    "-d, --debug"
+        Enable debug output.
+
+    "-h, --help"
+        Show the usage of anydb.
+
+    "-v, --version"
+        Show the program version.
+
+    All of these options can be used with subcommands as well.
+
+SUBCOMMANDS
+  completion
+    The completion command can be used to setup completion for anydb. Just
+    put something like this into your shell's configuration file:
+
+        source <(anydb completion bash)
+
+    If you use another shell, specify it instead of bash, of course.
+
+  set
+    The set command is being used to insert or update a key-value pair.
+
+    Usage:
+
+        Usage:
+          anydb set <key> [<value> | -r <file>] [-t <tag>] [flags]
+    
+        Aliases:
+          set, add, s, +
+    
+        Flags:
+          -e, --encrypt            encrypt value
+          -r, --file string        Filename or - for STDIN
+          -h, --help               help for set
+          -t, --tags tag,tag,...   tags, multiple allowed
+
+    The standard way to insert a new entry is really simple:
+
+        anydb set key value
+
+    If you don't specify a value, anydb expects you to feed it some data via
+    STDIN. For example:
+
+        anydb set key < file
+
+    You might as well specify a file directly using the "-f" option:
+
+        anydb set key -f file
+
+    Values can be encrypted using ChaCha20Poly1305 when you specify the "-e"
+    option. Anydb will ask you interactively for a passphrase. You can also
+    provide the passphrase using the environment variable "ANYDB_PASSWORD".
+    To encrypt the value, a cryptographically secure key will be derived
+    from the passphrase using the ArgonID2 algorithm. Each value can be
+    encrypted with another passphrase. So, the database itself is not
+    encrypted, just the values.
+
+    You can supply tags by using the option "-t". Multiple tags can be
+    provided either by separating them with a comma or by using multiple
+    "-t" parameters:
+
+        anydb set key value -t tag1,tag2
+        anydb set key value -t tag1 -t tag2
+
+    You can later filter entries by tag or by a combination of tags.
+
+    To edit or modify an entry, just use the set command with the same key,
+    the value in the database will be overwritten with the new value. An
+    alternative option is the edit command, see below.
+
+  get
+    To retrieve the value of a key, use the get subcommand.
+
+    Usage:
+
+        Usage:
+          anydb get  <key> [-o <file>] [-m <mode>] [-n -N] [-T <tpl>] [flags]
+    
+        Aliases:
+          get, show, g, .
+    
+        Flags:
+          -h, --help              help for get
+          -m, --mode string       output format (simple|wide|json|template) (default 'simple')
+          -n, --no-headers        omit headers in tables
+          -N, --no-human          do not translate to human readable values
+          -o, --output string     output value to file (ignores -m)
+          -T, --template string   go template for '-m template'
+
+    In its simplest form you just call the get subcommand with the key you
+    want to have the value for. The value is being printed to STDOUT by
+    default:
+
+        anydb get key
+
+    If the value is binary content, it will not just being printed. In those
+    cases you need to either redirect output into a file or use the option
+    "-o" to write to a file:
+
+        anydb get key > file
+        anydb get key -o file
+
+    If the value is encrypted, you will be asked for the passphrase to
+    decrypt it. If the environment variable "ANYDB_PASSWORD" is set, its
+    value will be used instead.
+
+    There are different output modes you can choose from: simple, wide and
+    json. The "simple" mode is the default one, it just prints the value as
+    is. The "wide" mode prints a tabular output similar to the list
+    subcommand, see there for more details. The options "-n" and "-N" have
+    the same meaning as in the list command. The "json" mode prints the raw
+    JSON representation of the whole database entry. Decryption will only
+    take place in "simple" and "json" mode. The "template" mode provides the
+    most flexibily, it is detailed in the section TEMPLATES.
+
+  list
+    The list subcommand displays a list of all database entries.
+
+    Usage:
+
+        Usage:
+          anydb list  [<filter-regex> | -t <tag> ] [-m <mode>] [-nNif] [-T <tpl>] [flags]
+    
+        Aliases:
+          list, ls, /, find, search
+    
+        Flags:
+          -i, --case-insensitive   filter case insensitive
+          -h, --help               help for list
+          -m, --mode string        output format (table|wide|json|template), wide is a verbose table. (default 'table')
+          -n, --no-headers         omit headers in tables
+          -N, --no-human           do not translate to human readable values
+          -s, --search-fulltext    perform a full text search
+          -t, --tags stringArray   tags, multiple allowed
+          -T, --template string    go template for '-m template'
+          -l, --wide-output        output mode: wide
+
+    In its simplest form - without any options - , the list command just
+    prints all keys with their values to STDOUT. Values are being truncated
+    to maximum of 60 characters, that is, multiline values are not
+    completely shown in order to keep the tabular view readable.
+
+    To get more informations about each entry, use the "-o wide" or "-l"
+    option. In addition to the key and value also the size, update timestamp
+    and tags will be printed. Time and size values are converted into a
+    human readable form, you can suppress this behavior with the "-N"
+    option. You may omit the headers using the option "-n"
+
+    Sometimes you might want to filter the list of entries. Either because
+    your database grew too large or because you're searching for something.
+    In that case you have two options: You may supply one or more tags or
+    provide a filter regexp. To filter by tag, do:
+
+        anydb list -t tag1
+        anydb list -t tag1,tag2
+        anydb list -t tag1 -t tag2
+
+    To filter using a regular expression, do:
+
+       anydb list "foo.*bar"
+
+    Regular expressions follow the golang re2 syntax. For more details about
+    the syntax, refer to <https://github.com/google/re2/wiki/Syntax>. Please
+    note, that this regexp dialect is not PCRE compatible, but supports most
+    of its features.
+
+    If you want to search case insensitive, add the option "-i".
+
+    By default anydb only searches through the keys. If you want to search
+    through the values as well, then use the "-s" option, which enables
+    full-text search.
+
+    You can - as with the get command - use other output modes. The default
+    mode is "table". The "wide" mode is, as already mentioned, a more
+    detailed table. Also supported is "json" mode and "template" mode. For
+    details about using templates see TEMPLATES.
+
+  del
+    Use the del command to delete database entries.
+
+    Usage:
+
+        Usage:
+          anydb del <key> [flags]
+    
+        Aliases:
+          del, d, rm
+    
+        Flags:
+          -h, --help   help for del
+
+    The subcommand del does not provide any further options, it just deletes
+    the entry referred to by the given key. No questions are being asked.
+
+  edit
+    The edit command makes it easier to modify larger entries.
+
+    Usage:
+
+       Usage:
+          anydb edit <key> [flags]
+    
+        Aliases:
+          edit, modify, mod, ed, vi
+    
+        Flags:
+          -h, --help   help for edit
+
+    The subcommand edit does not provide any further options. It works like
+    this:
+
+    1. Write the value info a temporary file.
+    2. Execute the editor (which one, see below!) with that file.
+    3. Now you can edit the file and save+close it when done.
+    4. Anydb picks up the file and if the content has changed, puts its
+    value into the DB.
+
+    By default anydb executes the "vi" command. You can modify this behavior
+    by setting the environment variable "EDITOR" appropriately.
+
+    Please note, that this does not work with binary content!
+
+  export
+    Since the bbolt database file is not portable across platforms (it is
+    bound to the endianess of the CPU it was being created on), you might
+    want to create a backup file of your database. You can do this with the
+    export subcommand.
+
+    Usage:
+
+        Usage:
+          anydb export -o <json filename> [flags]
+    
+        Aliases:
+          export, dump, backup
+    
+        Flags:
+          -h, --help            help for export
+          -o, --output string   output to file
+
+    The database dump is a JSON representation of the whole database and
+    will be printed to the file specified with the "-o" option. If you
+    specify "-" as the filename, it will be written to STDIN.
+
+        anydb export -o dump.json
+        anydb export -o - > dump.json
+
+    Please note, that encrypted values will not be decrypted. This might
+    change in a future version of anydb.
+
+  import
+    The import subcommand can be used to restore a database from a JSON
+    dump.
+
+    Usage:
+
+        Usage:
+          anydb import -i <json file> [flags]
+    
+        Aliases:
+          import, restore
+    
+        Flags:
+          -r, --file string        Filename or - for STDIN
+          -h, --help               help for import
+          -t, --tags stringArray   tags, multiple allowed
+
+    The "import" subcommand reads the JSON contents from the file specified
+    with the "-i" option. If you specify "-" as the filename, it will be
+    read from STDIN.
+
+        anydb import -i - < dump.json
+        anydb import -i dump.json
+        cat dump.json | anydb import -i -
+
+    If there is already a database, it will be saved by appending a
+    timestamp and a new database with the contents of the dump will be
+    created.
+
+  serve
+    Anydb provides a RESTful API, which you can use to manage the database
+    from somewhere else. The API does not provide any authentication or any
+    other security measures, so better only use it on localhost.
+
+    Usage:
+
+        Usage:
+          anydb serve [-l host:port] [flags]
+    
+        Flags:
+          -h, --help            help for serve
+          -l, --listen string   host:port (default "localhost:8787")
+
+    To start the listener, just execute the serve subcommand. You can tweak
+    the ip address and tcp port using the "-l" option. The listener will not
+    fork and run in the foreground. Logs are being printed to STDOUT as long
+    as the listener runs.
+
+    For more details about the API, please see the "REST API" section.
+
+  info
+    The info subcommand shows you some information about your current
+    database.
+
+    Usage:
+
+        Usage:
+          anydb info [flags]
+    
+        Flags:
+          -h, --help       help for info
+          -N, --no-human   do not translate to human readable values
+
+    Data being shown are: filename and size, number of keys per bucket. If
+    you supply the "-d" option (debug), some bbolt internals are being
+    displayed as well.
+
+  man
+    The man subcommand shows an unformatted text variant of the manual page
+    (which are currently reading).
+
+    Usage:
+
+        Usage:
+          anydb man [flags]
+    
+        Flags:
+          -h, --help   help for man
+
+    The manual is being piped into the "more" command, which is being
+    expected to exist according to the POSIX standard on all supported unix
+    platforms. It might not work on Windows.
+
+TEMPLATES
+    The get and list commands support a template feature, which is very
+    handy to create you own kind of formatting. The template syntax being
+    used is the GO template language, refer to
+    <https://pkg.go.dev/text/template> for details.
+
+    Each template operates on one or more entries, no loop construct is
+    required, the template provided applies to every matching entry
+    separatley.
+
+    The following template variables can be used:
+
+    .Key - string
+    .Value - string
+    .Bin - []byte
+    .Created - timestamp.Time
+        To retrieve a string representation of the timestamp, use
+        ".Created.AsTime". If you need a unix timestamp since epoch, use
+        ".Created.Unix".
+
+    .Tags - []string
+    .Encrypted bool
+
+    Prepend a single dot (".") before each variable name.
+
+    Here are some examples how to use the feature:
+
+    Only show the keys of all entries:
+
+        anydb list -m template -T "{{ .Key }}"
+
+    Format the list in a way so that is possible to evaluate it in a shell:
+
+        eval $(anydb get foo -m template -T "key='{{ .Key }}' value='{{ .Value }}' ts='{{ .Created.AsTime}}'")
+        echo "Key: $key, Value: $value, When: $ts"
+
+    Print the values in CSV format ONLY if they have some tag:
+
+        anydb list -m template -T "{{ if .Tags }}{{ .Key }},{{ .Value }},{{ .Created.AsTime}}{{ end }}"
+
+CONFIGURATION
+    Anydb looks at the following locations for a configuration file, in that
+    order:
+
+    "$HOME/.config/anydb/anydb.toml"
+    "$HOME/.anydb.toml"
+    "anydb.toml" in the current directory
+    or specify one using "-c"
+
+    The configuration format uses the TOML language, refer to
+    <https://toml.io/en/> for more details. The key names correspond to the
+    commandline options in most cases.
+
+    Configuration follows a certain precedence: the files are tried to be
+    read in the given order, followed by commandline options. That is, the
+    last configuration file wins, unless the user provides a commandline
+    option, then this setting will be taken.
+
+    A complete configuration file might look like this:
+
+        # defaults
+        dbfile     = "~/.config/anydb/default.db"
+        dbbucket   = "data"
+        noheaders  = false
+        nohumanize = false
+        encrypt    = false
+        listen     = "localhost:8787"
+    
+        # different setups for different buckets
+        [buckets.data]
+        encrypt = true
+    
+        [buckets.test]
+        encrypt = false
+
+    Under normal circumstances you don't need a configuration file. However,
+    if you want to use different buckets, then this might be a handy option.
+    Buckets are being configured in ini-style with the term "bucket."
+    followed by the bucket name. In the example above we enable encryption
+    for the default bucket "data" and disable it for a bucket "test". To use
+    different buckets, use the "-b" option.
+
+REST API
+    The subcommand serve starts a simple HTTP service, which responds to
+    RESTful HTTP requests. The listener responds to all requests with a JSON
+    encoded response. The response contains the status and the content - if
+    any - of the requested resource.
+
+    The following requests are supported:
+
+    GET /anydb/v1/
+        Returns a JSON encoded list of all entries.
+
+    GET /anydb/v1/key
+        Returns the JSON encoded entry, if found.
+
+    PUT /anydb/v1/
+        Create an entry. Expects a JSON encoded request object in POST data.
+
+    DELETE /anydb/v1/key
+        Delete an entry.
+
+    Some curl example calls to the API:
+
+    Post a new key: curl -X PUT localhost:8787/anydb/v1/ \ -H 'Content-Type:
+    application/json' \ -d '{"key":"foo","val":"bar"}'
+
+    Retrieve the value:
+
+        curl localhost:8787/anydb/v1/foo
+
+    List all keys:
+
+        curl localhost:8787/anydb/v1/
+
+BUGS
+    In order to report a bug, unexpected behavior, feature requests or to
+    submit a patch, please open an issue on github:
+    <https://github.com/TLINDEN/anydb/issues>.
+
+    Please repeat the failing command with debugging enabled "-d" and
+    include the output in the issue.
+
+LIMITATIONS
+    The REST API list request doesn't provide any filtering capabilities
+    yet.

 LICENSE
    This software is licensed under the GNU GENERAL PUBLIC LICENSE version
--- a/cmd/maincommands.go
+++ b/cmd/maincommands.go
@@ -1,13 +1,25 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
 package cmd

 import (
-	"bytes"
 	"errors"
-	"fmt"
 	"os"
-	"os/exec"
 	"strings"
-	"unicode/utf8"

 	"github.com/spf13/cobra"
 	"github.com/tlinden/anydb/app"
@@ -48,7 +60,7 @@ func Set(conf *cfg.Config) *cobra.Command {

 			// encrypt?
 			if conf.Encrypt {
-				pass, err := app.AskForPassword()
+				pass, err := getPassword()
 				if err != nil {
 					return err
 				}
@@ -80,7 +92,7 @@ func Get(conf *cfg.Config) *cobra.Command {
 	)

 	var cmd = &cobra.Command{
-		Use:   "get <key> [-o <file>] [-m <mode>] [-n]",
+		Use:   "get  <key> [-o <file>] [-m <mode>] [-n -N] [-T <tpl>]",
 		Short: "Retrieve value for a key",
 		Long:  `Retrieve value for a key`,
 		RunE: func(cmd *cobra.Command, args []string) error {
@@ -101,22 +113,18 @@ func Get(conf *cfg.Config) *cobra.Command {
 			}

 			if entry.Encrypted {
-				pass, err := app.AskForPassword()
+				pass, err := getPassword()
 				if err != nil {
 					return err
 				}

-				clear, err := app.Decrypt(pass, entry.Value)
+				clear, err := app.Decrypt(pass, []byte(entry.Value))
 				if err != nil {
 					return err
 				}

-				if utf8.ValidString(string(clear)) {
 				entry.Value = string(clear)
-				} else {
-					entry.Bin = clear
-				}
-
+				entry.Size = uint64(len(entry.Value))
 				entry.Encrypted = false
 			}

@@ -124,9 +132,11 @@ func Get(conf *cfg.Config) *cobra.Command {
 		},
 	}

-	cmd.PersistentFlags().StringVarP(&attr.File, "output", "o", "", "output to file (ignores -m)")
-	cmd.PersistentFlags().StringVarP(&conf.Mode, "mode", "m", "", "output format (simple|wide|json) (default 'simple')")
+	cmd.PersistentFlags().StringVarP(&attr.File, "output", "o", "", "output value to file (ignores -m)")
+	cmd.PersistentFlags().StringVarP(&conf.Mode, "mode", "m", "", "output format (simple|wide|json|template) (default 'simple')")
 	cmd.PersistentFlags().BoolVarP(&conf.NoHeaders, "no-headers", "n", false, "omit headers in tables")
+	cmd.PersistentFlags().BoolVarP(&conf.NoHumanize, "no-human", "N", false, "do not translate to human readable values")
+	cmd.PersistentFlags().StringVarP(&conf.Template, "template", "T", "", "go template for '-m template'")

 	cmd.Aliases = append(cmd.Aliases, "show")
 	cmd.Aliases = append(cmd.Aliases, "g")
@@ -166,38 +176,6 @@ func Del(conf *cfg.Config) *cobra.Command {
 	return cmd
 }

-func Export(conf *cfg.Config) *cobra.Command {
-	var (
-		attr app.DbAttr
-	)
-
-	var cmd = &cobra.Command{
-		Use:   "export [-o <json filename>]",
-		Short: "Export database to json",
-		Long:  `Export database to json`,
-		RunE: func(cmd *cobra.Command, args []string) error {
-			// errors at this stage do not cause the usage to be shown
-			cmd.SilenceUsage = true
-
-			conf.Mode = "json"
-
-			entries, err := conf.DB.List(&attr)
-			if err != nil {
-				return err
-			}
-
-			return output.WriteFile(&attr, conf, entries)
-		},
-	}
-
-	cmd.PersistentFlags().StringVarP(&attr.File, "output", "o", "", "output to file")
-
-	cmd.Aliases = append(cmd.Aliases, "dump")
-	cmd.Aliases = append(cmd.Aliases, "backup")
-
-	return cmd
-}
-
 func List(conf *cfg.Config) *cobra.Command {
 	var (
 		attr app.DbAttr
@@ -205,7 +183,7 @@ func List(conf *cfg.Config) *cobra.Command {
 	)

 	var cmd = &cobra.Command{
-		Use:   "list [-t <tag>] [-o <mode>] [<filter-regex>]",
+		Use:   "list  [<filter-regex> | -t <tag> ] [-m <mode>] [-nNis] [-T <tpl>]",
 		Short: "List database contents",
 		Long:  `List database contents`,
 		RunE: func(cmd *cobra.Command, args []string) error {
@@ -213,8 +191,12 @@ func List(conf *cfg.Config) *cobra.Command {
 			cmd.SilenceUsage = true

 			if len(args) > 0 {
+				if conf.CaseInsensitive {
+					attr.Args = []string{"(?i)" + args[0]}
+				} else {
 					attr.Args = args
 				}
+			}

 			// turn comma list into slice, if needed
 			if len(attr.Tags) == 1 && strings.Contains(attr.Tags[0], ",") {
@@ -225,7 +207,7 @@ func List(conf *cfg.Config) *cobra.Command {
 				conf.Mode = "wide"
 			}

-			entries, err := conf.DB.List(&attr)
+			entries, err := conf.DB.List(&attr, conf.Fulltext)
 			if err != nil {
 				return err
 			}
@@ -234,76 +216,38 @@ func List(conf *cfg.Config) *cobra.Command {
 		},
 	}

-	cmd.PersistentFlags().StringVarP(&conf.Mode, "mode", "m", "", "output format (table|wide|json), wide is a verbose table. (default 'table')")
+	cmd.PersistentFlags().StringVarP(&conf.Mode, "mode", "m", "", "output format (table|wide|json|template), wide is a verbose table. (default 'table')")
+	cmd.PersistentFlags().StringVarP(&conf.Template, "template", "T", "", "go template for '-m template'")
 	cmd.PersistentFlags().BoolVarP(&wide, "wide-output", "l", false, "output mode: wide")
 	cmd.PersistentFlags().BoolVarP(&conf.NoHeaders, "no-headers", "n", false, "omit headers in tables")
+	cmd.PersistentFlags().BoolVarP(&conf.NoHumanize, "no-human", "N", false, "do not translate to human readable values")
+	cmd.PersistentFlags().BoolVarP(&conf.CaseInsensitive, "case-insensitive", "i", false, "filter case insensitive")
+	cmd.PersistentFlags().BoolVarP(&conf.Fulltext, "search-fulltext", "s", false, "perform a full text search")
 	cmd.PersistentFlags().StringArrayVarP(&attr.Tags, "tags", "t", nil, "tags, multiple allowed")

-	cmd.Aliases = append(cmd.Aliases, "/")
 	cmd.Aliases = append(cmd.Aliases, "ls")
+	cmd.Aliases = append(cmd.Aliases, "/")
+	cmd.Aliases = append(cmd.Aliases, "find")
+	cmd.Aliases = append(cmd.Aliases, "search")

 	return cmd
 }

-func Import(conf *cfg.Config) *cobra.Command {
-	var (
-		attr app.DbAttr
-	)
+func getPassword() ([]byte, error) {
+	var pass []byte

-	var cmd = &cobra.Command{
-		Use:   "import [<json file>]",
-		Short: "Import database dump",
-		Long:  `Import database dump`,
-		RunE: func(cmd *cobra.Command, args []string) error {
-			// errors at this stage do not cause the usage to be shown
-			cmd.SilenceUsage = true
-
-			return conf.DB.Import(&attr)
-		},
-	}
-
-	cmd.PersistentFlags().StringVarP(&attr.File, "file", "r", "", "Filename or - for STDIN")
-	cmd.PersistentFlags().StringArrayVarP(&attr.Tags, "tags", "t", nil, "tags, multiple allowed")
-
-	cmd.Aliases = append(cmd.Aliases, "add")
-	cmd.Aliases = append(cmd.Aliases, "s")
-	cmd.Aliases = append(cmd.Aliases, "+")
-
-	return cmd
-}
-
-func Help(conf *cfg.Config) *cobra.Command {
-	return nil
-}
-
-func Man(conf *cfg.Config) *cobra.Command {
-	var cmd = &cobra.Command{
-		Use:   "man",
-		Short: "show manual page",
-		Long:  `show manual page`,
-		RunE: func(cmd *cobra.Command, args []string) error {
-			// errors at this stage do not cause the usage to be shown
-			cmd.SilenceUsage = true
-
-			man := exec.Command("less", "-")
-
-			var b bytes.Buffer
-
-			b.WriteString(manpage)
-
-			man.Stdout = os.Stdout
-			man.Stdin = &b
-			man.Stderr = os.Stderr
-
-			err := man.Run()
+	envpass := os.Getenv("ANYDB_PASSWORD")

+	if envpass == "" {
+		readpass, err := app.AskForPassword()
 		if err != nil {
-				return fmt.Errorf("failed to execute 'less': %w", err)
+			return nil, err
 		}

-			return nil
-		},
+		pass = readpass
+	} else {
+		pass = []byte(envpass)
 	}

-	return cmd
+	return pass, nil
 }
--- a/cmd/extra.go
+++ b/cmd/extra.go
@@ -0,0 +1,356 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+package cmd
+
+import (
+	"bytes"
+	"errors"
+	"fmt"
+	"io"
+	"os"
+	"os/exec"
+
+	tea "github.com/charmbracelet/bubbletea"
+	"github.com/spf13/cobra"
+	"github.com/tlinden/anydb/app"
+	"github.com/tlinden/anydb/cfg"
+	"github.com/tlinden/anydb/output"
+	"github.com/tlinden/anydb/rest"
+	"github.com/tlinden/anydb/ui"
+)
+
+func Export(conf *cfg.Config) *cobra.Command {
+	var (
+		attr app.DbAttr
+	)
+
+	var cmd = &cobra.Command{
+		Use:   "export -o <json filename>",
+		Short: "Export database to json file",
+		Long:  `Export database to json file`,
+		RunE: func(cmd *cobra.Command, args []string) error {
+			// errors at this stage do not cause the usage to be shown
+			cmd.SilenceUsage = true
+
+			conf.Mode = "json"
+
+			entries, err := conf.DB.Getall(&attr)
+			if err != nil {
+				return err
+			}
+
+			return output.WriteJSON(&attr, conf, entries)
+		},
+	}
+
+	cmd.PersistentFlags().StringVarP(&attr.File, "output-file", "o", "", "filename or - for STDIN")
+	if err := cmd.MarkPersistentFlagRequired("output-file"); err != nil {
+		panic(err)
+	}
+
+	cmd.Aliases = append(cmd.Aliases, "dump")
+	cmd.Aliases = append(cmd.Aliases, "backup")
+
+	return cmd
+}
+
+func Import(conf *cfg.Config) *cobra.Command {
+	var (
+		attr app.DbAttr
+	)
+
+	var cmd = &cobra.Command{
+		Use:   "import -i <json file>",
+		Short: "Import database dump",
+		Long:  `Import database dump`,
+		RunE: func(cmd *cobra.Command, args []string) error {
+			// errors at this stage do not cause the usage to be shown
+			cmd.SilenceUsage = true
+
+			out, err := conf.DB.Import(&attr)
+			if err != nil {
+				return err
+			}
+
+			fmt.Print(out)
+			return nil
+		},
+	}
+
+	cmd.PersistentFlags().StringVarP(&attr.File, "import-file", "i", "", "filename or - for STDIN")
+	cmd.PersistentFlags().StringArrayVarP(&attr.Tags, "tags", "t", nil, "tags, multiple allowed")
+	if err := cmd.MarkPersistentFlagRequired("import-file"); err != nil {
+		panic(err)
+	}
+
+	cmd.Aliases = append(cmd.Aliases, "restore")
+
+	return cmd
+}
+
+func Help(conf *cfg.Config) *cobra.Command {
+	return nil
+}
+func Man(conf *cfg.Config) *cobra.Command {
+	var cmd = &cobra.Command{
+		Use:   "man",
+		Short: "show manual page",
+		Long:  `show manual page`,
+		RunE: func(cmd *cobra.Command, args []string) error {
+			// errors at this stage do not cause the usage to be shown
+			cmd.SilenceUsage = true
+
+			man := exec.Command("less", "-")
+
+			var b bytes.Buffer
+
+			b.WriteString(manpage)
+
+			man.Stdout = os.Stdout
+			man.Stdin = &b
+			man.Stderr = os.Stderr
+
+			err := man.Run()
+
+			if err != nil {
+				return fmt.Errorf("failed to execute 'less': %w", err)
+			}
+
+			return nil
+		},
+	}
+
+	return cmd
+}
+
+func Serve(conf *cfg.Config) *cobra.Command {
+	var cmd = &cobra.Command{
+		Use:   "serve [-l host:port]",
+		Short: "run REST API listener",
+		Long:  `run REST API listener`,
+		RunE: func(cmd *cobra.Command, args []string) error {
+			// errors at this stage do not cause the usage to be shown
+			cmd.SilenceUsage = true
+
+			return rest.Runserver(conf, nil)
+		},
+	}
+
+	cmd.PersistentFlags().StringVarP(&conf.Listen, "listen", "l", "localhost:8787", "host:port")
+
+	return cmd
+}
+
+func Info(conf *cfg.Config) *cobra.Command {
+	var cmd = &cobra.Command{
+		Use:   "info",
+		Short: "info",
+		Long:  `show info about database`,
+		RunE: func(cmd *cobra.Command, args []string) error {
+			// errors at this stage do not cause the usage to be shown
+			cmd.SilenceUsage = true
+
+			info, err := conf.DB.Info()
+			if err != nil {
+				return err
+			}
+
+			return output.Info(os.Stdout, conf, info)
+		},
+	}
+
+	cmd.PersistentFlags().BoolVarP(&conf.NoHumanize, "no-human", "N", false, "do not translate to human readable values")
+
+	return cmd
+}
+
+func Edit(conf *cfg.Config) *cobra.Command {
+	var (
+		attr app.DbAttr
+	)
+
+	var cmd = &cobra.Command{
+		Use:   "edit <key>",
+		Short: "Edit a key",
+		Long:  `Edit a key`,
+		RunE: func(cmd *cobra.Command, args []string) error {
+			if len(args) == 0 {
+				return errors.New("no key specified")
+			}
+
+			// errors at this stage do not cause the usage to be shown
+			cmd.SilenceUsage = true
+			password := []byte{}
+
+			if len(args) > 0 {
+				attr.Key = args[0]
+			}
+
+			// fetch entry
+			entry, err := conf.DB.Get(&attr)
+			if err != nil {
+				return err
+			}
+
+			if len(entry.Value) == 0 && entry.Binary {
+				return errors.New("key contains binary uneditable content")
+			}
+
+			// decrypt if needed
+			if entry.Encrypted {
+				pass, err := getPassword()
+				if err != nil {
+					return err
+				}
+				password = pass
+
+				clear, err := app.Decrypt(pass, []byte(entry.Value))
+				if err != nil {
+					return err
+				}
+
+				entry.Value = string(clear)
+				entry.Encrypted = false
+			}
+
+			// determine editor, vi is default
+			editor := getEditor()
+
+			// save file to a temp file, call the editor with it, read
+			// it  back in and  compare the content with  the original
+			// one
+			newcontent, err := editContent(editor, string(entry.Value))
+			if err != nil {
+				return err
+			}
+
+			// all is valid, fill our DB feeder
+			newattr := app.DbAttr{
+				Key:       attr.Key,
+				Tags:      attr.Tags,
+				Encrypted: attr.Encrypted,
+				Val:       []byte(newcontent),
+			}
+
+			// encrypt if needed
+			if conf.Encrypt {
+				err = app.Encrypt(password, &attr)
+				if err != nil {
+					return err
+				}
+			}
+
+			// done
+			return conf.DB.Set(&newattr)
+		},
+	}
+
+	cmd.Aliases = append(cmd.Aliases, "modify")
+	cmd.Aliases = append(cmd.Aliases, "mod")
+	cmd.Aliases = append(cmd.Aliases, "ed")
+	cmd.Aliases = append(cmd.Aliases, "vi")
+
+	return cmd
+}
+
+func getEditor() string {
+	editor := "vi"
+
+	enveditor, present := os.LookupEnv("EDITOR")
+	if present {
+		if editor != "" {
+			editor = enveditor
+		}
+	}
+
+	return editor
+}
+
+// taken from github.com/tlinden/rpn/ (my own program)
+func editContent(editor string, content string) (string, error) {
+	// create a temp file
+	tmp, err := os.CreateTemp("", "stack")
+	if err != nil {
+		return "", fmt.Errorf("failed to create templ file: %w", err)
+	}
+	defer os.Remove(tmp.Name())
+
+	// put the content into a tmp file
+	_, err = tmp.WriteString(content)
+	if err != nil {
+		return "", fmt.Errorf("failed to write value to temp file: %w", err)
+	}
+
+	// execute editor with our tmp file containing current stack
+	cmd := exec.Command(editor, tmp.Name())
+
+	cmd.Stdin = os.Stdin
+	cmd.Stdout = os.Stdout
+	cmd.Stderr = os.Stderr
+
+	err = cmd.Run()
+	if err != nil {
+		return "", fmt.Errorf("failed to run editor command %s: %w", editor, err)
+	}
+
+	// read the file back in
+	modified, err := os.Open(tmp.Name())
+	if err != nil {
+		return "", fmt.Errorf("failed to open temp file: %w", err)
+	}
+	defer modified.Close()
+
+	newcontent, err := io.ReadAll(modified)
+	if err != nil {
+		return "", fmt.Errorf("failed to read from temp file: %w", err)
+	}
+
+	newcontentstr := string(newcontent)
+	if content == newcontentstr {
+		return "", fmt.Errorf("content not modified, aborting")
+	}
+
+	return newcontentstr, nil
+}
+
+func Shell(conf *cfg.Config) *cobra.Command {
+	var cmd = &cobra.Command{
+		Use:   "shell",
+		Short: "shell",
+		Long:  `interactive ui`,
+		RunE: func(cmd *cobra.Command, args []string) error {
+			// errors at this stage do not cause the usage to be shown
+			cmd.SilenceUsage = true
+
+			entries, err := conf.DB.List(&app.DbAttr{}, conf.Fulltext)
+			if err != nil {
+				return err
+			}
+
+			p := tea.NewProgram(ui.NewModel(conf, entries), tea.WithAltScreen())
+			if _, err := p.Run(); err != nil {
+				return err
+			}
+
+			return nil
+		},
+	}
+
+	cmd.PersistentFlags().BoolVarP(&conf.NoHumanize, "no-human", "N", false, "do not translate to human readable values")
+
+	return cmd
+}
--- a/cmd/root.go
+++ b/cmd/root.go
@@ -1,14 +1,34 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
 package cmd

 import (
 	"errors"
 	"fmt"
+	"log/slog"
 	"os"
 	"path/filepath"
+	"runtime/debug"

+	slogmulti "github.com/samber/slog-multi"
 	"github.com/spf13/cobra"
 	"github.com/tlinden/anydb/app"
 	"github.com/tlinden/anydb/cfg"
+	"github.com/tlinden/yadu"
 )

 func completion(cmd *cobra.Command, mode string) error {
@@ -29,22 +49,80 @@ func completion(cmd *cobra.Command, mode string) error {
 func Execute() {
 	var (
 		conf           cfg.Config
+		configfile     string
 		ShowVersion    bool
 		ShowCompletion string
 	)

+	home, err := os.UserHomeDir()
+	if err != nil {
+		panic(err)
+	}
+
+	SearchConfigs := []string{
+		filepath.Join(home, ".config", "anydb", "anydb.toml"),
+		filepath.Join(home, ".anydb.toml"),
+		"anydb.toml",
+	}
+
 	var rootCmd = &cobra.Command{
 		Use:   "anydb <command> [options]",
 		Short: "anydb",
 		Long:  `A personal key value store`,
 		PersistentPreRunE: func(cmd *cobra.Command, args []string) error {
-			db, err := app.New(conf.Dbfile, conf.Debug)
+
+			var configs []string
+			if configfile != "" {
+				configs = []string{configfile}
+			} else {
+				configs = SearchConfigs
+			}
+
+			if err := conf.GetConfig(configs); err != nil {
+				return err
+			}
+
+			if conf.Debug {
+				buildInfo, _ := debug.ReadBuildInfo()
+				opts := &yadu.Options{
+					Level:     slog.LevelDebug,
+					AddSource: true,
+				}
+
+				slog.SetLogLoggerLevel(slog.LevelDebug)
+
+				dbg, err := os.Create("debug.log")
+				if err != nil {
+					return err
+				}
+
+				// FIXME: control this with a flag!
+				//outhandler := yadu.NewHandler(os.Stdout, opts)
+				filehandler := yadu.NewHandler(dbg, opts)
+
+				debuglogger := slog.New(slogmulti.Fanout(
+					//outhandler,
+					filehandler,
+				)).With(
+					slog.Group("program_info",
+						slog.Int("pid", os.Getpid()),
+						slog.String("go_version", buildInfo.GoVersion),
+					),
+				)
+
+				slog.SetDefault(debuglogger)
+
+				slog.Debug("parsed config", "conf", conf)
+			}
+
+			dbfile := app.GetDbFile(conf.Dbfile)
+
+			db, err := app.New(dbfile, conf.Dbbucket, conf.Debug)
 			if err != nil {
 				return err
 			}

 			conf.DB = db
-
 			return nil
 		},

@@ -66,24 +144,33 @@ func Execute() {
 		},
 	}

-	home, err := os.UserHomeDir()
-	if err != nil {
-		panic(err)
-	}
-
 	// options
 	rootCmd.PersistentFlags().BoolVarP(&ShowVersion, "version", "v", false, "Print program version")
 	rootCmd.PersistentFlags().BoolVarP(&conf.Debug, "debug", "d", false, "Enable debugging")
 	rootCmd.PersistentFlags().StringVarP(&conf.Dbfile, "dbfile", "f",
-		filepath.Join(home, ".config", "anydb", "default.db"), "DB file to use")
+		"", "DB file to use (default: ~/.config/anydb/default.db)")
+	rootCmd.PersistentFlags().StringVarP(&conf.Dbbucket, "bucket", "b",
+		app.BucketData, "use other bucket (default: "+app.BucketData+")")
+	rootCmd.PersistentFlags().StringVarP(&configfile, "config", "c", "", "toml config file")

+	// CRUD
 	rootCmd.AddCommand(Set(&conf))
 	rootCmd.AddCommand(List(&conf))
 	rootCmd.AddCommand(Get(&conf))
 	rootCmd.AddCommand(Del(&conf))
+
+	// backup
 	rootCmd.AddCommand(Export(&conf))
 	rootCmd.AddCommand(Import(&conf))
+
+	// REST API
+	rootCmd.AddCommand(Serve(&conf))
+
+	// auxiliary
 	rootCmd.AddCommand(Man(&conf))
+	rootCmd.AddCommand(Info(&conf))
+	rootCmd.AddCommand(Edit(&conf))
+	rootCmd.AddCommand(Shell(&conf))

 	err = rootCmd.Execute()
 	if err != nil {
--- a/common/io.go
+++ b/common/io.go
@@ -0,0 +1,36 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+package common
+
+import "os"
+
+func CleanError(file string, err error) error {
+	// remove given [backup] file and forward the given error
+	os.Remove(file)
+	return err
+}
+
+func FileExists(filename string) bool {
+	info, err := os.Stat(filename)
+
+	if err != nil {
+		// return false on any error
+		return false
+	}
+
+	return !info.IsDir()
+}
--- a/demo/Makefile
+++ b/demo/Makefile
@@ -0,0 +1,21 @@
+.PHONY: demo clean check clean-demo
+
+VHS  = vhs
+
+
+
+clean-demo:
+	rm -f local.db*
+
+%.gif: %.tape
+	@echo "vhs $<"
+	env PATH=..:$(PATH) ANYDB_DB=local.db vhs $<
+
+clean:
+	rm -vf *.db* *.json
+
+check:
+	ls -l ../anydb
+
+demo: check clean-demo intro.gif advanced.gif
+
--- a/demo/advanced.gif
+++ b/demo/advanced.gif
--- a/demo/advanced.tape
+++ b/demo/advanced.tape
@@ -0,0 +1,182 @@
+# -*-sh-*-
+
+Output advanced.gif
+Set FontSize 20
+Set Width 1000
+Set Height 800
+Set Theme { "name": "Whimsy", "black": "#535178", "red": "#ef6487", "green": "#5eca89", "yellow": "#fdd877", "blue": "#65aef7", "magenta": "#aa7ff0", "cyan": "#43c1be", "white": "#ffffff", "brightBlack": "#535178", "brightRed": "#ef6487", "brightGreen": "#5eca89", "brightYellow": "#fdd877", "brightBlue": "#65aef7", "brightMagenta": "#aa7ff0", "brightCyan": "#43c1be", "brightWhite": "#ffffff", "background": "#29283b", "foreground": "#b3b0d6", "selection": "#3d3c58", "cursor": "#b3b0d6" }
+Set WindowBar Colorful
+Set BorderRadius 10
+Set Shell zsh
+Set FontFamily "IBM Plex Mono"
+Set CursorBlink false
+Set PlaybackSpeed 1
+Set TypingSpeed .05
+
+Hide
+Type `PROMPT=''`
+Enter
+Type "setopt interactivecomments"
+Enter
+Type "autoload -U colors && colors"
+Enter
+Type `PS1="%{$fg[magenta]%}demo> %{$reset_color%}"`
+Enter
+Type "clear"
+Enter
+Show
+
+
+Type "# you can assign tags"
+Enter
+Sleep 1s
+Type "anydb set foo bar -t note,important"
+Enter
+Sleep 3s
+
+Enter
+Type "# and filter for them"
+Enter
+Sleep 1s
+Type "anydb list -t important"
+Enter
+Sleep 3s
+
+Enter
+Type "# beside tags filtering you can also use regexps for searching"
+Enter
+Type "# note, by default the list command only searches through keys"
+Enter
+Sleep 1s
+Type "anydb list '[a-z]+'"
+Enter
+Sleep 3s
+
+Enter
+Type "# do a full text search"
+Enter
+Sleep 1s
+Type "anydb list '[a-z]+' -s"
+Enter
+Sleep 3s
+
+Enter
+Type "# anydb also supports a wide output"
+Enter
+Sleep 1s
+Type "anydb list -m wide"
+Enter
+Sleep 3s
+
+Enter
+Type "# there are shortcuts as well"
+Enter
+Sleep 1s
+Type "anydb ls -l"
+Enter
+Sleep 2s
+Type "anydb /"
+Enter
+Sleep 3s
+
+Enter
+Type "# other outputs are possible as well"
+Enter
+Sleep 1s
+Type "anydb list -m json"
+Enter
+Sleep 3s
+
+Enter
+Type "# you can backup your database"
+Enter
+Sleep 1s
+Type "anydb export -o backup.json"
+Enter
+Sleep 3s
+
+Enter
+Type "# and import it somewhere else"
+Enter
+Sleep 1s
+Type "rm local.db"
+Enter
+Sleep 1s
+Type "anydb ls -l"
+Enter
+Sleep 1s
+Type "anydb import -i backup.json"
+Enter
+Sleep 1s
+Type "anydb ls -l"
+Enter
+Sleep 3s
+
+Enter
+Type "# you can encrypt entries. anydb asks for a passphrase"
+Enter
+Type "# and will do the same when you retrieve the key using the"
+Enter
+Type "# get command. anydb will ask you interactively for a password"
+Enter
+Sleep 1s
+Type "anydb set address 'Beatstreet 42' -e"
+Enter
+Type "pass"
+Enter
+Sleep 3s
+
+Enter
+Type "# but you can provide it via an environment variable too"
+Enter
+Sleep 1s
+Type "ANYDB_PASSWORD=foo anydb set -e secretkey blahblah"
+Enter
+Sleep 3s
+
+Enter
+Type "# using template output mode you can freely design how to print stuff"
+Enter
+Type "# here, we print the values in CSV format ONLY if they have some tag"
+Enter
+Type "# also note, that we're printing the creation timestamp as epoch"
+Sleep 1s
+Type `anydb ls -m template -T "{{ if .Tags }}{{ .Key }},{{ .Value }},{{ .Created.AsTime.Unix}}{{ end }}"`
+Enter
+Sleep 3s
+
+Enter
+Type "# or, to simulate skate's -k or -v"
+Enter
+Sleep 1s
+Type `anydb ls -m template -T "{{ .Key }}"`
+Enter
+Sleep 1s
+Type `anydb ls -m template -T "{{ .Value }}"`
+Enter
+Sleep 3s
+
+Enter
+Type "# maybe you want to digest the item in a shell script? also"
+Enter
+Type "# note, that both the list and get commands support templates"
+Enter
+Sleep 1s
+Type `eval $(anydb get kitty -m template -T "value='{{ .Value }}'"); echo "value: $value"`
+Enter
+Sleep 3s
+
+Enter
+Type "# sometimes you need to know some details about the current database"
+Enter
+Type "# add -d for more details"
+Enter
+Sleep 1
+Type "anydb info"
+Enter
+Sleep 3s
+
+Enter
+Type "# Try it out yourself: github.com/tlinden/anydb!"
+Enter
+Sleep 4s
--- a/demo/intro.gif
+++ b/demo/intro.gif
--- a/demo/intro.tape
+++ b/demo/intro.tape
@@ -0,0 +1,76 @@
+# -*-sh-*-
+
+Output intro.gif
+Set FontSize 20
+Set Width 1000
+Set Height 800
+Set Theme { "name": "Whimsy", "black": "#535178", "red": "#ef6487", "green": "#5eca89", "yellow": "#fdd877", "blue": "#65aef7", "magenta": "#aa7ff0", "cyan": "#43c1be", "white": "#ffffff", "brightBlack": "#535178", "brightRed": "#ef6487", "brightGreen": "#5eca89", "brightYellow": "#fdd877", "brightBlue": "#65aef7", "brightMagenta": "#aa7ff0", "brightCyan": "#43c1be", "brightWhite": "#ffffff", "background": "#29283b", "foreground": "#b3b0d6", "selection": "#3d3c58", "cursor": "#b3b0d6" }
+Set WindowBar Colorful
+Set BorderRadius 10
+Set Shell zsh
+Set FontFamily "IBM Plex Mono"
+Set CursorBlink false
+Set PlaybackSpeed 1
+Set TypingSpeed .05
+
+Hide
+Type `PROMPT=''`
+Enter
+Type "setopt interactivecomments"
+Enter
+Type "autoload -U colors && colors"
+Enter
+Type `PS1="%{$fg[magenta]%}demo> %{$reset_color%}"`
+Enter
+Type "clear"
+Enter
+Show
+
+Type "# Store something"
+Enter
+Sleep 1s
+Type "anydb set kitty meow"
+Enter
+Sleep 3s
+
+Enter
+Type `# What's in the store?`
+Enter
+Sleep 1s
+Type "anydb ls"
+Enter
+Sleep 3s
+
+Enter
+Type "# Fetch something"
+Enter
+Sleep 1s
+Type "anydb get kitty"
+Enter
+Sleep 3s
+
+Enter
+Type "# Unicode also works, of course"
+Enter
+Sleep 1s
+Type "anydb set 猫咪 喵"
+Enter
+Sleep 2s
+Type "anydb get 猫咪"
+Enter
+Sleep 3s
+
+Enter
+Type "# Do creative things with anydb list"
+Enter
+Sleep 1s
+Type "anydb set penelope marmalade"
+Enter
+Type "anydb set christian tacos"
+Enter
+Type "anydb set muesli muesli"
+Enter
+Type "anydb list | xargs -n 2 printf '%s loves %s.\n'"
+Enter
+Sleep 3s
+
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -1,3 +1,19 @@
+# 
+# Copyright © 2024 Thomas von Dein
+# 
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+# 
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+# 
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+# 
 version: "3.9"
 services:
  init:
--- a/example.toml
+++ b/example.toml
@@ -0,0 +1,14 @@
+# defaults
+dbfile     = "~/.config/anydb/default.db"
+dbbucket   = "data"
+noheaders  = false
+nohumanize = false
+encrypt    = false
+listen     = "localhost:8787"
+
+# different setups for different buckets
+[buckets.data]
+encrypt = true
+
+[buckets.test]
+encrypt = false
--- a/go.mod
+++ b/go.mod
@@ -1,19 +1,59 @@
 module github.com/tlinden/anydb

-go 1.22.1
+go 1.23
+
+toolchain go1.23.5

 require (
-	github.com/alecthomas/repr v0.4.0 // indirect
-	github.com/dustin/go-humanize v1.0.1 // indirect
-	github.com/inconshreveable/mousetrap v1.1.0 // indirect
-	github.com/mattn/go-runewidth v0.0.9 // indirect
-	github.com/olekukonko/tablewriter v0.0.5 // indirect
-	github.com/rogpeppe/go-internal v1.13.1 // indirect
-	github.com/spf13/cobra v1.8.1 // indirect
-	github.com/spf13/pflag v1.0.5 // indirect
-	go.etcd.io/bbolt v1.3.11 // indirect
-	golang.org/x/crypto v0.31.0 // indirect
-	golang.org/x/sys v0.28.0 // indirect
-	golang.org/x/term v0.27.0 // indirect
-	golang.org/x/tools v0.22.0 // indirect
+	github.com/alecthomas/repr v0.4.0
+	github.com/dustin/go-humanize v1.0.1
+	github.com/gofiber/fiber/v2 v2.52.6
+	github.com/inconshreveable/mousetrap v1.1.0
+	github.com/olekukonko/tablewriter v0.0.5
+	github.com/pelletier/go-toml v1.9.5
+	github.com/rogpeppe/go-internal v1.13.1
+	github.com/spf13/cobra v1.8.1
+	go.etcd.io/bbolt v1.4.0
+	golang.org/x/crypto v0.31.0
+	golang.org/x/term v0.27.0
+	google.golang.org/protobuf v1.36.5
+)
+
+require (
+	github.com/andybalholm/brotli v1.1.1 // indirect
+	github.com/atotto/clipboard v0.1.4 // indirect
+	github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
+	github.com/charmbracelet/bubbles v0.20.0 // indirect
+	github.com/charmbracelet/bubbletea v1.3.3 // indirect
+	github.com/charmbracelet/lipgloss v1.0.0 // indirect
+	github.com/charmbracelet/x/ansi v0.8.0 // indirect
+	github.com/charmbracelet/x/term v0.2.1 // indirect
+	github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f // indirect
+	github.com/fatih/color v1.16.0 // indirect
+	github.com/gofiber/fiber/v3 v3.0.0-beta.3 // indirect
+	github.com/gofiber/utils/v2 v2.0.0-beta.4 // indirect
+	github.com/google/uuid v1.6.0 // indirect
+	github.com/klauspost/compress v1.17.11 // indirect
+	github.com/lucasb-eyer/go-colorful v1.2.0 // indirect
+	github.com/mattn/go-colorable v0.1.14 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
+	github.com/mattn/go-localereader v0.0.1 // indirect
+	github.com/mattn/go-runewidth v0.0.16 // indirect
+	github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6 // indirect
+	github.com/muesli/cancelreader v0.2.2 // indirect
+	github.com/muesli/termenv v0.15.2 // indirect
+	github.com/rivo/uniseg v0.4.7 // indirect
+	github.com/sahilm/fuzzy v0.1.1 // indirect
+	github.com/samber/lo v1.49.1 // indirect
+	github.com/samber/slog-multi v1.4.0 // indirect
+	github.com/spf13/pflag v1.0.6 // indirect
+	github.com/tlinden/yadu v0.1.3 // indirect
+	github.com/valyala/bytebufferpool v1.0.0 // indirect
+	github.com/valyala/fasthttp v1.55.0 // indirect
+	github.com/valyala/tcplisten v1.0.0 // indirect
+	golang.org/x/sync v0.11.0 // indirect
+	golang.org/x/sys v0.30.0 // indirect
+	golang.org/x/text v0.21.0 // indirect
+	golang.org/x/tools v0.22.0 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
 )
--- a/go.sum
+++ b/go.sum
@@ -2,54 +2,162 @@ github.com/DataDog/zstd v1.4.1/go.mod h1:1jcaCB/ufaK+sKp1NBhlGmpz41jOoPQ35bpF36t
 github.com/Sereal/Sereal v0.0.0-20190618215532-0b8ac451a863/go.mod h1:D0JMgToj/WdxCgd30Kc1UcA9E+WdZoJqeVOuYW7iTBM=
 github.com/alecthomas/repr v0.4.0 h1:GhI2A8MACjfegCPVq9f1FLvIBS+DrQ2KQBFZP1iFzXc=
 github.com/alecthomas/repr v0.4.0/go.mod h1:Fr0507jx4eOXV7AlPV6AVZLYrLIuIeSOWtW57eE/O/4=
+github.com/andybalholm/brotli v1.0.5 h1:8uQZIdzKmjc/iuPu7O2ioW48L81FgatrcpfFmiq/cCs=
+github.com/andybalholm/brotli v1.0.5/go.mod h1:fO7iG3H7G2nSZ7m0zPUDn85XEX2GTukHGRSepvi9Eig=
+github.com/andybalholm/brotli v1.1.0 h1:eLKJA0d02Lf0mVpIDgYnqXcUn0GqVmEFny3VuID1U3M=
+github.com/andybalholm/brotli v1.1.0/go.mod h1:sms7XGricyQI9K10gOSf56VKKWS4oLer58Q+mhRPtnY=
+github.com/andybalholm/brotli v1.1.1 h1:PR2pgnyFznKEugtsUo0xLdDop5SKXd5Qf5ysW+7XdTA=
+github.com/andybalholm/brotli v1.1.1/go.mod h1:05ib4cKhjx3OQYUY22hTVd34Bc8upXjOLL2rKwwZBoA=
 github.com/asdine/storm/v3 v3.2.1 h1:I5AqhkPK6nBZ/qJXySdI7ot5BlXSZ7qvDY1zAn5ZJac=
 github.com/asdine/storm/v3 v3.2.1/go.mod h1:LEpXwGt4pIqrE/XcTvCnZHT5MgZCV6Ub9q7yQzOFWr0=
+github.com/atotto/clipboard v0.1.4 h1:EH0zSVneZPSuFR11BlR9YppQTVDbh5+16AmcJi4g1z4=
+github.com/atotto/clipboard v0.1.4/go.mod h1:ZY9tmq7sm5xIbd9bOK4onWV4S6X0u6GY7Vn0Yu86PYI=
+github.com/aymanbagabas/go-osc52/v2 v2.0.1 h1:HwpRHbFMcZLEVr42D4p7XBqjyuxQH5SMiErDT4WkJ2k=
+github.com/aymanbagabas/go-osc52/v2 v2.0.1/go.mod h1:uYgXzlJ7ZpABp8OJ+exZzJJhRNQ2ASbcXHWsFqH8hp8=
+github.com/charmbracelet/bubbles v0.20.0 h1:jSZu6qD8cRQ6k9OMfR1WlM+ruM8fkPWkHvQWD9LIutE=
+github.com/charmbracelet/bubbles v0.20.0/go.mod h1:39slydyswPy+uVOHZ5x/GjwVAFkCsV8IIVy+4MhzwwU=
+github.com/charmbracelet/bubbletea v1.3.3 h1:WpU6fCY0J2vDWM3zfS3vIDi/ULq3SYphZhkAGGvmEUY=
+github.com/charmbracelet/bubbletea v1.3.3/go.mod h1:dtcUCyCGEX3g9tosuYiut3MXgY/Jsv9nKVdibKKRRXo=
+github.com/charmbracelet/lipgloss v1.0.0 h1:O7VkGDvqEdGi93X+DeqsQ7PKHDgtQfF8j8/O2qFMQNg=
+github.com/charmbracelet/lipgloss v1.0.0/go.mod h1:U5fy9Z+C38obMs+T+tJqst9VGzlOYGj4ri9reL3qUlo=
+github.com/charmbracelet/x/ansi v0.8.0 h1:9GTq3xq9caJW8ZrBTe0LIe2fvfLR/bYXKTx2llXn7xE=
+github.com/charmbracelet/x/ansi v0.8.0/go.mod h1:wdYl/ONOLHLIVmQaxbIYEC/cRKOQyjTkowiI4blgS9Q=
+github.com/charmbracelet/x/term v0.2.1 h1:AQeHeLZ1OqSXhrAWpYUtZyX1T3zVxfpZuEQMIQaGIAQ=
+github.com/charmbracelet/x/term v0.2.1/go.mod h1:oQ4enTYFV7QN4m0i9mzHrViD7TQKvNEEkHUMCmsxdUg=
 github.com/cpuguy83/go-md2man/v2 v2.0.4/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY=
 github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto=
+github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f h1:Y/CXytFA4m6baUTXGLOoWe4PQhGxaX0KpnayAqC48p4=
+github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f/go.mod h1:vw97MGsxSvLiUE2X8qFplwetxpGLQrlU1Q9AUEIzCaM=
+github.com/fatih/color v1.16.0 h1:zmkK9Ngbjj+K0yRhTVONQh1p/HknKYSlNT+vZCzyokM=
+github.com/fatih/color v1.16.0/go.mod h1:fL2Sau1YI5c0pdGEVCbKQbLXB6edEj1ZgiY4NijnWvE=
+github.com/gofiber/fiber/v2 v2.52.5 h1:tWoP1MJQjGEe4GB5TUGOi7P2E0ZMMRx5ZTG4rT+yGMo=
+github.com/gofiber/fiber/v2 v2.52.5/go.mod h1:KEOE+cXMhXG0zHc9d8+E38hoX+ZN7bhOtgeF2oT6jrQ=
+github.com/gofiber/fiber/v2 v2.52.6 h1:Rfp+ILPiYSvvVuIPvxrBns+HJp8qGLDnLJawAu27XVI=
+github.com/gofiber/fiber/v2 v2.52.6/go.mod h1:YEcBbO/FB+5M1IZNBP9FO3J9281zgPAreiI1oqg8nDw=
+github.com/gofiber/fiber/v3 v3.0.0-beta.3 h1:7Q2I+HsIqnIEEDB+9oe7Gadpakh6ZLhXpTYz/L20vrg=
+github.com/gofiber/fiber/v3 v3.0.0-beta.3/go.mod h1:kcMur0Dxqk91R7p4vxEpJfDWZ9u5IfvrtQc8Bvv/JmY=
+github.com/gofiber/utils/v2 v2.0.0-beta.4 h1:1gjbVFFwVwUb9arPcqiB6iEjHBwo7cHsyS41NeIW3co=
+github.com/gofiber/utils/v2 v2.0.0-beta.4/go.mod h1:sdRsPU1FXX6YiDGGxd+q2aPJRMzpsxdzCXo9dz+xtOY=
 github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/snappy v0.0.1/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
+github.com/google/uuid v1.5.0 h1:1p67kYwdtXjb0gL0BPiP1Av9wiZPo5A8z2cWkTZ+eyU=
+github.com/google/uuid v1.5.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
+github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
+github.com/klauspost/compress v1.17.0 h1:Rnbp4K9EjcDuVuHtd0dgA4qNuv9yKDYKK1ulpJwgrqM=
+github.com/klauspost/compress v1.17.0/go.mod h1:ntbaceVETuRiXiv4DpjP66DpAtAGkEQskQzEyD//IeE=
+github.com/klauspost/compress v1.17.9 h1:6KIumPrER1LHsvBVuDa0r5xaG0Es51mhhB9BQB2qeMA=
+github.com/klauspost/compress v1.17.9/go.mod h1:Di0epgTjJY877eYKx5yC51cX2A2Vl2ibi7bDH9ttBbw=
+github.com/klauspost/compress v1.17.11 h1:In6xLpyWOi1+C7tXUUWv2ot1QvBjxevKAaI6IXrJmUc=
+github.com/klauspost/compress v1.17.11/go.mod h1:pMDklpSncoRMuLFrf1W9Ss9KT+0rH90U12bZKk7uwG0=
 github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
 github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
 github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
+github.com/lucasb-eyer/go-colorful v1.2.0 h1:1nnpGOrhyZZuNyfu1QjKiUICQ74+3FNCN69Aj6K7nkY=
+github.com/lucasb-eyer/go-colorful v1.2.0/go.mod h1:R4dSotOR9KMtayYi1e77YzuveK+i7ruzyGqttikkLy0=
+github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
+github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
+github.com/mattn/go-colorable v0.1.14 h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE=
+github.com/mattn/go-colorable v0.1.14/go.mod h1:6LmQG8QLFO4G5z1gPvYEzlUgJ2wF+stgPZH1UqBm1s8=
+github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
+github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
+github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
+github.com/mattn/go-localereader v0.0.1 h1:ygSAOl7ZXTx4RdPYinUpg6W99U8jWvWi9Ye2JC/oIi4=
+github.com/mattn/go-localereader v0.0.1/go.mod h1:8fBrzywKY7BI3czFoHkuzRoWE9C+EiG4R1k4Cjx5p88=
 github.com/mattn/go-runewidth v0.0.9 h1:Lm995f3rfxdpd6TSmuVCHVb/QhupuXlYr8sCI/QdE+0=
 github.com/mattn/go-runewidth v0.0.9/go.mod h1:H031xJmbD/WCDINGzjvQ9THkh0rPKHF+m2gUSrubnMI=
+github.com/mattn/go-runewidth v0.0.15 h1:UNAjwbU9l54TA3KzvqLGxwWjHmMgBUVhBiTjelZgg3U=
+github.com/mattn/go-runewidth v0.0.15/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w=
+github.com/mattn/go-runewidth v0.0.16 h1:E5ScNMtiwvlvB5paMFdw9p4kSQzbXFikJ5SQO6TULQc=
+github.com/mattn/go-runewidth v0.0.16/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w=
+github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6 h1:ZK8zHtRHOkbHy6Mmr5D264iyp3TiX5OmNcI5cIARiQI=
+github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6/go.mod h1:CJlz5H+gyd6CUWT45Oy4q24RdLyn7Md9Vj2/ldJBSIo=
+github.com/muesli/cancelreader v0.2.2 h1:3I4Kt4BQjOR54NavqnDogx/MIoWBFa0StPA8ELUXHmA=
+github.com/muesli/cancelreader v0.2.2/go.mod h1:3XuTXfFS2VjM+HTLZY9Ak0l6eUKfijIfMUZ4EgX0QYo=
+github.com/muesli/termenv v0.15.2 h1:GohcuySI0QmI3wN8Ok9PtKGkgkFIk7y6Vpb5PvrY+Wo=
+github.com/muesli/termenv v0.15.2/go.mod h1:Epx+iuz8sNs7mNKhxzH4fWXGNpZwUaJKRS1noLXviQ8=
 github.com/olekukonko/tablewriter v0.0.5 h1:P2Ga83D34wi1o9J6Wh1mRuqd4mF/x/lgBS7N7AbDhec=
 github.com/olekukonko/tablewriter v0.0.5/go.mod h1:hPp6KlRPjbx+hW8ykQs1w3UBbZlj6HuIJcUGPhkA7kY=
+github.com/pelletier/go-toml v1.9.5 h1:4yBQzkHv+7BHq2PQUZF3Mx0IYxG7LsP222s7Agd3ve8=
+github.com/pelletier/go-toml v1.9.5/go.mod h1:u1nR/EPcESfeI/szUZKdtJ0xRNbUoANCkoOuaOx1Y+c=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/rivo/uniseg v0.2.0 h1:S1pD9weZBuJdFmowNwbpi7BJ8TNftyUImj/0WQi72jY=
+github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
+github.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ=
+github.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88=
 github.com/rogpeppe/go-internal v1.13.1 h1:KvO1DLK/DRN07sQ1LQKScxyZJuNnedQ5/wKSR38lUII=
 github.com/rogpeppe/go-internal v1.13.1/go.mod h1:uMEvuHeurkdAXX61udpOXGD/AzZDWNMNyH2VO9fmH0o=
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
+github.com/sahilm/fuzzy v0.1.1 h1:ceu5RHF8DGgoi+/dR5PsECjCDH1BE3Fnmpo7aVXOdRA=
+github.com/sahilm/fuzzy v0.1.1/go.mod h1:VFvziUEIMCrT6A6tw2RFIXPXXmzXbOsSHF0DOI8ZK9Y=
+github.com/samber/lo v1.49.1 h1:4BIFyVfuQSEpluc7Fua+j1NolZHiEHEpaSEKdsH0tew=
+github.com/samber/lo v1.49.1/go.mod h1:dO6KHFzUKXgP8LDhU0oI8d2hekjXnGOu0DB8Jecxd6o=
+github.com/samber/slog-multi v1.4.0 h1:pwlPMIE7PrbTHQyKWDU+RIoxP1+HKTNOujk3/kdkbdg=
+github.com/samber/slog-multi v1.4.0/go.mod h1:FsQ4Uv2L+E/8TZt+/BVgYZ1LoDWCbfCU21wVIoMMrO8=
 github.com/spf13/cobra v1.8.1 h1:e5/vxKd/rZsfSJMUX1agtjeTDf+qv1/JdBF8gg5k9ZM=
 github.com/spf13/cobra v1.8.1/go.mod h1:wHxEcudfqmLYa8iTfL+OuZPbBZkmvliBWKIezN3kD9Y=
 github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
 github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
+github.com/spf13/pflag v1.0.6 h1:jFzHGLGAlb3ruxLB8MhbI6A8+AQX/2eW4qeyNZXNp2o=
+github.com/spf13/pflag v1.0.6/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
+github.com/tlinden/yadu v0.1.3 h1:5cRCUmj+l5yvlM2irtpFBIJwVV2DPEgYSaWvF19FtcY=
+github.com/tlinden/yadu v0.1.3/go.mod h1:l3bRmHKL9zGAR6pnBHY2HRPxBecf7L74BoBgOOpTcUA=
+github.com/valyala/bytebufferpool v1.0.0 h1:GqA5TC/0021Y/b9FG4Oi9Mr3q7XYx6KllzawFIhcdPw=
+github.com/valyala/bytebufferpool v1.0.0/go.mod h1:6bBcMArwyJ5K/AmCkWv1jt77kVWyCJ6HpOuEn7z0Csc=
+github.com/valyala/fasthttp v1.51.0 h1:8b30A5JlZ6C7AS81RsWjYMQmrZG6feChmgAolCl1SqA=
+github.com/valyala/fasthttp v1.51.0/go.mod h1:oI2XroL+lI7vdXyYoQk03bXBThfFl2cVdIA3Xl7cH8g=
+github.com/valyala/fasthttp v1.55.0 h1:Zkefzgt6a7+bVKHnu/YaYSOPfNYNisSVBo/unVCf8k8=
+github.com/valyala/fasthttp v1.55.0/go.mod h1:NkY9JtkrpPKmgwV3HTaS2HWaJss9RSIsRVfcxxoHiOM=
+github.com/valyala/tcplisten v1.0.0 h1:rBHj/Xf+E1tRGZyWIWwJDiRY0zc1Js+CV5DqwacVSA8=
+github.com/valyala/tcplisten v1.0.0/go.mod h1:T0xQ8SeCZGxckz9qRXTfG43PvQ/mcWh7FwZEA7Ioqkc=
 github.com/vmihailenco/msgpack v4.0.4+incompatible/go.mod h1:fy3FlTQTDXWkZ7Bh6AcGMlsjHatGryHQYUTf1ShIgkk=
+github.com/xyproto/randomstring v1.0.5/go.mod h1:rgmS5DeNXLivK7YprL0pY+lTuhNQW3iGxZ18UQApw/E=
 go.etcd.io/bbolt v1.3.4/go.mod h1:G5EMThwa9y8QZGBClrRx5EY+Yw9kAhnjy3bSjsnlVTQ=
 go.etcd.io/bbolt v1.3.11 h1:yGEzV1wPz2yVCLsD8ZAiGHhHVlczyC9d1rP43/VCRJ0=
 go.etcd.io/bbolt v1.3.11/go.mod h1:dksAq7YMXoljX0xu6VF5DMZGbhYYoLUalEiSySYAS4I=
+go.etcd.io/bbolt v1.4.0 h1:TU77id3TnN/zKr7CO/uk+fBCwF2jGcMuw2B/FMAzYIk=
+go.etcd.io/bbolt v1.4.0/go.mod h1:AsD+OCi/qPN1giOX1aiLAha3o1U8rAz65bvN4j0sRuk=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U=
 golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
 golang.org/x/net v0.0.0-20190603091049-60506f45cf65/go.mod h1:HSz+uSET+XFnRR8LxR5pz3Of3rY3CfYBVs4xY44aLks=
 golang.org/x/net v0.0.0-20191105084925-a882066a44e0/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/sync v0.11.0 h1:GGz8+XQP4FvTTrjZPzNKTMFtSXH80RAzG+5ghFPgK9w=
+golang.org/x/sync v0.11.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20200202164722-d101bd2416d5/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210809222454-d867a43fc93e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA=
 golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.29.0 h1:TPYlXGxvx1MGTn2GiZDhnjPA9wZzZeGKHHmKhHYvgaU=
+golang.org/x/sys v0.29.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.30.0 h1:QjkSwP/36a20jFYWkSue1YwXzLmsV5Gfq7Eiy72C1uc=
+golang.org/x/sys v0.30.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.27.0 h1:WP60Sv1nlK1T6SupCHbXzSaN0b9wUmsPoRS9b61A23Q=
 golang.org/x/term v0.27.0/go.mod h1:iMsnZpn0cago0GOrHO2+Y7u7JPn5AylBrcoWkElMTSM=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
+golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo=
+golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.22.0 h1:gqSGLZqv+AI9lIQzniJ0nZDRG5GBPsSi+DRNHWNz6yA=
 golang.org/x/tools v0.22.0/go.mod h1:aCwcsjqvq7Yqt6TNyX7QMU2enbQ/Gt0bo6krSeEri+c=
 google.golang.org/appengine v1.6.5/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
+google.golang.org/protobuf v1.36.1 h1:yBPeRvTftaleIgM3PZ/WBIZ7XM/eEYAaEyCwvyjq/gk=
+google.golang.org/protobuf v1.36.1/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE=
+google.golang.org/protobuf v1.36.4 h1:6A3ZDJHn/eNqc1i+IdefRzy/9PokBTPvcqMySR7NNIM=
+google.golang.org/protobuf v1.36.4/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE=
+google.golang.org/protobuf v1.36.5 h1:tPhr+woSbjfYvY6/GPufUoYizxw1cF/yFoxJ2fmpwlM=
+google.golang.org/protobuf v1.36.5/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
--- a/main.go
+++ b/main.go
@@ -1,8 +1,25 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
 package main

 import (
 	"bufio"
 	"fmt"
+	"log/slog"
 	"os"
 	"runtime"

@@ -11,9 +28,31 @@ import (
 )

 func main() {
+	const NoLogsLevel = 100
+	slog.SetLogLoggerLevel(NoLogsLevel)
+
 	Main()
 }

+func init() {
+	// if we're running on Windows  AND if the user double clicked the
+	// exe  file from explorer, we  tell them and then  wait until any
+	// key has been hit, which  will make the cmd window disappear and
+	// thus give the user time to read it.
+	if runtime.GOOS == "windows" {
+		if mousetrap.StartedByExplorer() {
+			fmt.Println("Do no double click kleingebaeck.exe!")
+			fmt.Println("Please open a command shell and run it from there.")
+			fmt.Println()
+			fmt.Print("Press any key to quit: ")
+			_, err := bufio.NewReader(os.Stdin).ReadString('\n')
+			if err != nil {
+				panic(err)
+			}
+		}
+	}
+}
+
 func Main() int {
 	cmd.Execute()
 	return 0
--- a/main_test.go
+++ b/main_test.go
@@ -1,3 +1,19 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
 package main

 import (
--- a/mkrel.sh
+++ b/mkrel.sh
@@ -1,6 +1,6 @@
 #!/bin/bash

-# Copyright © 2023 Thomas von Dein
+# Copyright © 2024 Thomas von Dein

 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
--- a/output/export.go
+++ b/output/export.go
@@ -0,0 +1,50 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+package output
+
+import (
+	"encoding/json"
+	"fmt"
+	"os"
+
+	"github.com/tlinden/anydb/app"
+	"github.com/tlinden/anydb/cfg"
+)
+
+func WriteJSON(attr *app.DbAttr, conf *cfg.Config, entries app.DbEntries) error {
+	jsonentries, err := json.Marshal(entries)
+	if err != nil {
+		return fmt.Errorf("failed to marshall json: %w", err)
+	}
+
+	if attr.File == "-" {
+		fmt.Println(string(jsonentries))
+	} else {
+		fd, err := os.OpenFile(attr.File, os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0600)
+		if err != nil {
+			return fmt.Errorf("failed to open file %s for writing: %w", attr.File, err)
+		}
+
+		if _, err := fd.Write(jsonentries); err != nil {
+			return fmt.Errorf("failed writing to file %s: %w", attr.File, err)
+		}
+
+		fmt.Printf("database contents exported to %s\n", attr.File)
+	}
+
+	return nil
+}
--- a/output/list.go
+++ b/output/list.go
@@ -1,11 +1,30 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
 package output

 import (
+	"bytes"
 	"encoding/json"
 	"errors"
 	"fmt"
 	"io"
+	"strconv"
 	"strings"
+	tpl "text/template"

 	"github.com/dustin/go-humanize"
 	"github.com/olekukonko/tablewriter"
@@ -14,16 +33,13 @@ import (
 )

 func List(writer io.Writer, conf *cfg.Config, entries app.DbEntries) error {
-	// FIXME: call sort here
 	switch conf.Mode {
-	case "wide":
-		fallthrough
-	case "":
-		fallthrough
-	case "table":
+	case "wide", "", "table":
 		return ListTable(writer, conf, entries)
 	case "json":
 		return ListJson(writer, conf, entries)
+	case "template":
+		return ListTemplate(writer, conf, entries)
 	default:
 		return errors.New("unsupported mode")
 	}
@@ -39,45 +55,64 @@ func ListJson(writer io.Writer, conf *cfg.Config, entries app.DbEntries) error {
 	return nil
 }

+func ListTemplate(writer io.Writer, conf *cfg.Config, entries app.DbEntries) error {
+	tmpl, err := tpl.New("list").Parse(conf.Template)
+	if err != nil {
+		return fmt.Errorf("failed to parse output template: %w", err)
+	}
+
+	buf := bytes.Buffer{}
+
+	for _, row := range entries {
+		buf.Reset()
+		err = tmpl.Execute(&buf, row)
+		if err != nil {
+			return fmt.Errorf("failed to execute output template: %w", err)
+		}
+
+		if buf.Len() > 0 {
+			fmt.Fprintln(writer, buf.String())
+		}
+	}
+
+	return nil
+}
+
 func ListTable(writer io.Writer, conf *cfg.Config, entries app.DbEntries) error {
 	tableString := &strings.Builder{}
 	table := tablewriter.NewWriter(tableString)

 	if !conf.NoHeaders {
 		if conf.Mode == "wide" {
-			table.SetHeader([]string{"KEY", "TAGS", "SIZE", "AGE", "VALUE"})
+			table.SetHeader([]string{"KEY", "TAGS", "SIZE", "UPDATED", "VALUE"})
 		} else {
 			table.SetHeader([]string{"KEY", "VALUE"})
 		}
 	}

 	for _, row := range entries {
-		size := len(row.Value)
-
-		if row.Encrypted {
-			row.Value = "<encrypted-content>"
-		}
-
-		if len(row.Bin) > 0 {
-			row.Value = "<binary-content>"
-			size = len(row.Bin)
-		}
-
-		if len(row.Value) > 60 {
-			row.Value = row.Value[0:60] + "..."
-		}
-
 		if conf.Mode == "wide" {
+			switch conf.NoHumanize {
+			case true:
 				table.Append([]string{
 					row.Key,
 					strings.Join(row.Tags, ","),
-				humanize.Bytes(uint64(size)),
-				//row.Created.Format("02.01.2006T03:04.05"),
-				humanize.Time(row.Created),
-				row.Value,
+					strconv.FormatUint(row.Size, 10),
+					row.Created.AsTime().Format("02.01.2006T03:04.05"),
+					row.Preview,
 				})
+			default:
+				table.Append([]string{
+					row.Key,
+					strings.Join(row.Tags, ","),
+					humanize.Bytes(uint64(row.Size)),
+					humanize.Time(row.Created.AsTime()),
+					row.Preview,
+				})
+			}
+
 		} else {
-			table.Append([]string{row.Key, row.Value})
+			table.Append([]string{row.Key, row.Preview})
 		}
 	}

--- a/output/single.go
+++ b/output/single.go
@@ -1,3 +1,19 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
 package output

 import (
@@ -5,57 +21,33 @@ import (
 	"fmt"
 	"io"
 	"os"
-	"strings"
+	"reflect"

+	"github.com/dustin/go-humanize"
 	"github.com/tlinden/anydb/app"
 	"github.com/tlinden/anydb/cfg"
 	"golang.org/x/term"
+	//"github.com/alecthomas/repr"
 )

 func Print(writer io.Writer, conf *cfg.Config, attr *app.DbAttr, entry *app.DbEntry) error {
 	if attr.File != "" {
-		fd, err := os.OpenFile(attr.File, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0755)
-		if err != nil {
-			return fmt.Errorf("failed to open file %s for writing: %w", attr.File, err)
-		}
-		defer fd.Close()
-
-		if len(entry.Bin) > 0 {
-			// binary file content
-			_, err = fd.Write(entry.Bin)
-		} else {
-			val := entry.Value
-			if !strings.HasSuffix(val, "\n") {
-				// always add a terminal newline
-				val += "\n"
-			}
-
-			_, err = fd.Write([]byte(val))
-		}
-
-		if err != nil {
-			return fmt.Errorf("failed to write to file %s: %w", attr.File, err)
-		}
-
-		return nil
+		return WriteFile(writer, conf, attr, entry)
 	}

 	isatty := term.IsTerminal(int(os.Stdout.Fd()))

 	switch conf.Mode {
-	case "simple":
-		fallthrough
-	case "":
-		if len(entry.Bin) > 0 {
+	case "simple", "":
+		if entry.Binary {
 			if isatty {
 				fmt.Println("binary data omitted")
 			} else {
-				os.Stdout.Write(entry.Bin)
+				os.Stdout.WriteString(entry.Value)
 			}
 		} else {
-			fmt.Print(entry.Value)
-
-			if !strings.HasSuffix(entry.Value, "\n") {
+			fmt.Print(string(entry.Value))
+			if entry.Value[entry.Size-1] != '\n' {
 				// always add a terminal newline
 				fmt.Println()
 			}
@@ -68,8 +60,76 @@ func Print(writer io.Writer, conf *cfg.Config, attr *app.DbAttr, entry *app.DbEn

 		fmt.Println(string(jsonentry))
 	case "wide":
-		return ListTable(writer, conf, app.DbEntries{*entry})
+		return ListTable(writer, conf, app.DbEntries{entry})
+	case "template":
+		return ListTemplate(writer, conf, app.DbEntries{entry})
 	}

 	return nil
 }
+
+func WriteFile(writer io.Writer, conf *cfg.Config, attr *app.DbAttr, entry *app.DbEntry) error {
+	var fileHandle *os.File
+	var err error
+
+	if attr.File == "-" {
+		fileHandle = os.Stdout
+	} else {
+		fd, err := os.OpenFile(attr.File, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0755)
+		if err != nil {
+			return fmt.Errorf("failed to open file %s for writing: %w", attr.File, err)
+		}
+		defer fd.Close()
+
+		fileHandle = fd
+	}
+
+	// actually write file content
+	_, err = fileHandle.WriteString(entry.Value)
+
+	if !entry.Binary {
+		if entry.Value[entry.Size-1] != '\n' {
+			// always add a terminal newline
+			_, err = fileHandle.Write([]byte{'\n'})
+		}
+	}
+
+	if err != nil {
+		return fmt.Errorf("failed to write to file %s: %w", attr.File, err)
+	}
+
+	return nil
+}
+
+func Info(writer io.Writer, conf *cfg.Config, info *app.DbInfo) error {
+	fmt.Fprintf(writer, "Database: %s\n", info.Path)
+
+	for _, bucket := range info.Buckets {
+		if conf.NoHumanize {
+			fmt.Fprintf(
+				writer,
+				"%19s: %s\n%19s: %d\n%19s: %d\n%19s: %t\n",
+				"Bucket", bucket.Name,
+				"Size", bucket.Size,
+				"Keys", bucket.Keys,
+				"Encrypted", conf.Encrypt)
+		} else {
+			fmt.Fprintf(
+				writer,
+				"%19s: %s\n%19s: %s\n%19s: %d\n",
+				"Bucket", bucket.Name,
+				"Size", humanize.Bytes(uint64(bucket.Size)),
+				"Keys", bucket.Keys)
+		}
+
+		if conf.Debug {
+			val := reflect.ValueOf(&bucket.Stats).Elem()
+			for i := 0; i < val.NumField(); i++ {
+				fmt.Fprintf(writer, "%19s: %v\n", val.Type().Field(i).Name, val.Field(i))
+			}
+		}
+
+		fmt.Fprintln(writer)
+	}
+	return nil
+}
--- a/output/write.go
+++ b/output/write.go
@@ -1,34 +0,0 @@
-package output
-
-import (
-	"encoding/json"
-	"fmt"
-	"os"
-
-	"github.com/tlinden/anydb/app"
-	"github.com/tlinden/anydb/cfg"
-)
-
-func WriteFile(attr *app.DbAttr, conf *cfg.Config, entries app.DbEntries) error {
-	jsonentries, err := json.Marshal(entries)
-	if err != nil {
-		return fmt.Errorf("failed to marshall json: %w", err)
-	}
-
-	if attr.File == "-" {
-		fmt.Println(string(jsonentries))
-	} else {
-		fd, err := os.OpenFile(attr.File, os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0600)
-		if err != nil {
-			return fmt.Errorf("failed to open file %s for writing: %w", attr.File, err)
-		}
-
-		if _, err := fd.Write(jsonentries); err != nil {
-			return fmt.Errorf("failed writing to file %s: %w", attr.File, err)
-		}
-
-		fmt.Printf("database contents exported to %s\n", attr.File)
-	}
-
-	return nil
-}
--- a/rest/handlers.go
+++ b/rest/handlers.go
@@ -0,0 +1,140 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+package rest
+
+import (
+	//"github.com/alecthomas/repr"
+
+	"github.com/gofiber/fiber/v2"
+	"github.com/tlinden/anydb/app"
+	"github.com/tlinden/anydb/cfg"
+)
+
+type SetContext struct {
+	Query string `json:"query" form:"query"`
+}
+
+type ListResponse struct {
+	Success bool
+	Code    int
+	Entries app.DbEntries
+}
+
+type SingleResponse struct {
+	Success bool
+	Code    int
+	Entry   *app.DbEntry
+}
+
+func RestList(c *fiber.Ctx, conf *cfg.Config) error {
+	attr := new(app.DbAttr)
+
+	if len(c.Body()) > 0 {
+		if err := c.BodyParser(attr); err != nil {
+			return c.Status(fiber.StatusUnprocessableEntity).JSON(fiber.Map{
+				"errors": err.Error(),
+			})
+
+		}
+	}
+
+	// get list
+	entries, err := conf.DB.List(attr, attr.Fulltext)
+	if err != nil {
+		return JsonStatus(c, fiber.StatusForbidden,
+			"Unable to list keys: "+err.Error())
+	}
+
+	return c.Status(fiber.StatusOK).JSON(
+		ListResponse{
+			Success: true,
+			Code:    fiber.StatusOK,
+			Entries: entries,
+		},
+	)
+}
+
+func RestGet(c *fiber.Ctx, conf *cfg.Config) error {
+	if c.Params("key") == "" {
+		return JsonStatus(c, fiber.StatusForbidden,
+			"key not provided")
+	}
+
+	// get list
+	entry, err := conf.DB.Get(&app.DbAttr{Key: c.Params("key")})
+	if err != nil {
+		return JsonStatus(c, fiber.StatusForbidden,
+			"Unable to get key: "+err.Error())
+	}
+	if entry.Key == "" {
+		return JsonStatus(c, fiber.StatusForbidden,
+			"Key does not exist")
+	}
+
+	return c.Status(fiber.StatusOK).JSON(
+		SingleResponse{
+			Success: true,
+			Code:    fiber.StatusOK,
+			Entry:   entry,
+		},
+	)
+}
+
+func RestDelete(c *fiber.Ctx, conf *cfg.Config) error {
+	if c.Params("key") == "" {
+		return JsonStatus(c, fiber.StatusForbidden,
+			"key not provided")
+	}
+
+	// get list
+	err := conf.DB.Del(&app.DbAttr{Key: c.Params("key")})
+	if err != nil {
+		return JsonStatus(c, fiber.StatusForbidden,
+			"Unable to delete key: "+err.Error())
+	}
+
+	return c.Status(fiber.StatusOK).JSON(
+		Result{
+			Success: true,
+			Code:    fiber.StatusOK,
+			Message: "key deleted",
+		},
+	)
+}
+
+func RestSet(c *fiber.Ctx, conf *cfg.Config) error {
+	attr := new(app.DbAttr)
+	if err := c.BodyParser(attr); err != nil {
+		return c.Status(fiber.StatusUnprocessableEntity).JSON(fiber.Map{
+			"errors": err.Error(),
+		})
+
+	}
+
+	err := conf.DB.Set(attr)
+	if err != nil {
+		return JsonStatus(c, fiber.StatusForbidden,
+			"Unable to set key: "+err.Error())
+	}
+
+	return c.Status(fiber.StatusOK).JSON(
+		Result{
+			Success: true,
+			Code:    fiber.StatusOK,
+		},
+	)
+}
--- a/rest/serve.go
+++ b/rest/serve.go
@@ -0,0 +1,118 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+package rest
+
+import (
+	"github.com/gofiber/fiber/v2"
+	"github.com/gofiber/fiber/v2/middleware/compress"
+	"github.com/gofiber/fiber/v2/middleware/cors"
+	"github.com/gofiber/fiber/v2/middleware/logger"
+	"github.com/tlinden/anydb/cfg"
+)
+
+// used to return to the api client
+type Result struct {
+	Success bool   `json:"success"`
+	Message string `json:"message"`
+	Code    int    `json:"code"`
+}
+
+func Runserver(conf *cfg.Config, args []string) error {
+	// setup api server
+	router := SetupServer(conf)
+
+	// public rest api routes
+	api := router.Group("/anydb/v1")
+	{
+		api.Get("/", func(c *fiber.Ctx) error {
+			return RestList(c, conf)
+		})
+
+		api.Post("/", func(c *fiber.Ctx) error {
+			// same thing as above but allows to supply parameters, see app.Dbattr{}
+			return RestList(c, conf)
+		})
+
+		api.Get("/:key", func(c *fiber.Ctx) error {
+			return RestGet(c, conf)
+		})
+
+		api.Delete("/:key", func(c *fiber.Ctx) error {
+			return RestDelete(c, conf)
+		})
+
+		api.Put("/", func(c *fiber.Ctx) error {
+			return RestSet(c, conf)
+		})
+	}
+
+	// public routes
+	{
+		router.Get("/", func(c *fiber.Ctx) error {
+			return c.Send([]byte("Use the REST API"))
+		})
+	}
+
+	return router.Listen(conf.Listen)
+}
+
+func SetupServer(conf *cfg.Config) *fiber.App {
+	// disable colors
+	fiber.DefaultColors = fiber.Colors{}
+
+	router := fiber.New(fiber.Config{
+		CaseSensitive: true,
+		StrictRouting: true,
+		Immutable:     true,
+		ServerHeader:  "anydb serve",
+		AppName:       "anydb",
+	})
+
+	router.Use(logger.New(logger.Config{
+		Format:        "${pid} ${ip}:${port} ${status} - ${method} ${path}\n",
+		DisableColors: true,
+	}))
+
+	router.Use(cors.New(cors.Config{
+		AllowMethods:  "GET,PUT,POST,DELETE",
+		ExposeHeaders: "Content-Type,Accept",
+	}))
+
+	router.Use(compress.New(compress.Config{
+		Level: compress.LevelBestSpeed,
+	}))
+
+	return router
+}
+
+/*
+Wrapper to respond with proper json status, message and code,
+shall be prepared and called by the handlers directly.
+*/
+func JsonStatus(c *fiber.Ctx, code int, msg string) error {
+	success := true
+
+	if code != fiber.StatusOK {
+		success = false
+	}
+
+	return c.Status(code).JSON(Result{
+		Code:    code,
+		Message: msg,
+		Success: success,
+	})
+}
--- a/t/crypt.txtar
+++ b/t/crypt.txtar
@@ -0,0 +1,37 @@
+# 
+# Copyright © 2025 Thomas von Dein
+# 
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+# 
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+# 
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+# 
+
+# encrypt something
+exec env ANYDB_PASSWORD=12345 anydb -f test.db set -e secret eshishinusan
+
+# retrieve it
+exec env ANYDB_PASSWORD=12345 anydb -f test.db get secret
+stdout eshishinusan
+
+# but has it really been encrypted?
+! exec env ANYDB_PASSWORD=8d8d8 anydb -f test.db get secret 
+! stdout eshishinusan
+stderr 'message authentication failed'
+
+# what about the listing
+exec anydb -f test.db ls -l
+stdout 'encrypted-content'
+! stdout eshishinusan
+
+# and the export?
+exec anydb -f test.db export -o -
+! stdout eshishinusan
--- a/t/files.txtar
+++ b/t/files.txtar
@@ -1,3 +1,20 @@
+# 
+# Copyright © 2024 Thomas von Dein
+# 
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+# 
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+# 
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+# 
+
 # simple file, we cannot use redirection here, so dd is our friend
 exec dd if=/dev/random of=file.txt count=5 bs=10

@@ -15,3 +32,20 @@ stdout 50
 # look if it's inside the db
 exec anydb -f test.db ls
 stdout datum.*binary-content
+
+# do the same thing with text content, start with a new text entry
+exec anydb -f test.db set feed alpha
+
+# which we write to a file
+exec anydb -f test.db get feed -o out2.txt
+exists out2.txt
+
+# check if its filled (5 bytes + newline)
+exec ls -l out2.txt
+stdout 6
+
+# compare content
+exec cat out2.txt
+stdout alpha
+
+
--- a/t/interface.txtar
+++ b/t/interface.txtar
@@ -1,3 +1,20 @@
+# 
+# Copyright © 2024 Thomas von Dein
+# 
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+# 
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+# 
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+# 
+
 # check default outputs

 exec anydb -v
--- a/t/restore.txtar
+++ b/t/restore.txtar
@@ -1,3 +1,20 @@
+# 
+# Copyright © 2024 Thomas von Dein
+# 
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+# 
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+# 
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+# 
+
 # setup simple db
 exec anydb -f test.db set foo bar

@@ -6,10 +23,10 @@ exec anydb -f test.db export -o backup.json
 stdout 'database contents exported to backup.json'

 # import into new db
-exec anydb -f new.db import -r backup.json
+exec anydb -f new.db import -i backup.json
 stdout 'imported.*entries'

 # check contents
-exec anydb -f new.db list
+exec anydb -f new.db list bar -s
 stdout foo.*bar

--- a/t/workflow.txtar
+++ b/t/workflow.txtar
@@ -1,6 +1,26 @@
+# 
+# Copyright © 2024 Thomas von Dein
+# 
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+# 
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+# 
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+# 
+
 # simple entry
 exec anydb -f test.db set foo bar

+# single entry uc()
+exec anydb -f test.db set MUCHAS gracias
+
 # entry with tags
 exec anydb -f test.db set color grey -t flower,plant

@@ -17,9 +37,13 @@ exec anydb -f test.db list -t flower
 ! stdout bar

 # list with filter
-exec anydb -f test.db list b.r
+exec anydb -f test.db list b.r -s
 stdout bar

+# list with -i filter
+exec anydb -f test.db list -is mucha 
+stdout mucha
+
 # get single entry
 exec anydb -f test.db get color
 stdout grey
--- a/ui/delegate.go
+++ b/ui/delegate.go
@@ -0,0 +1,99 @@
+package ui
+
+import (
+	"log"
+	"log/slog"
+
+	"github.com/charmbracelet/bubbles/key"
+	"github.com/charmbracelet/bubbles/list"
+	tea "github.com/charmbracelet/bubbletea"
+	"github.com/tlinden/anydb/app"
+	"github.com/tlinden/anydb/cfg"
+)
+
+func newItemDelegate(keys *delegateKeyMap, config *cfg.Config) list.DefaultDelegate {
+	d := list.NewDefaultDelegate()
+
+	d.UpdateFunc = func(msg tea.Msg, m *list.Model) tea.Cmd {
+		var title string
+
+		if entry, ok := m.SelectedItem().(item); ok {
+			title = entry.Title()
+			slog.Debug("active entry", "entry", title)
+		} else {
+			slog.Debug("no active entry")
+			return nil
+		}
+
+		switch msg := msg.(type) {
+		case tea.KeyMsg:
+			switch {
+			case key.Matches(msg, keys.choose):
+				return m.NewStatusMessage(statusMessageStyle("You chose " + title))
+
+			case key.Matches(msg, keys.remove):
+				if err := config.DB.Del(&app.DbAttr{Key: title}); err != nil {
+					log.Fatal(err)
+				}
+				index := m.Index()
+				m.RemoveItem(index)
+				if len(m.Items()) == 0 {
+					keys.remove.SetEnabled(false)
+				}
+				return m.NewStatusMessage(statusMessageStyle("Deleted " + title))
+			}
+		}
+
+		return nil
+	}
+
+	help := []key.Binding{keys.choose, keys.remove}
+
+	d.ShortHelpFunc = func() []key.Binding {
+		return help
+	}
+
+	d.FullHelpFunc = func() [][]key.Binding {
+		return [][]key.Binding{help}
+	}
+
+	return d
+}
+
+type delegateKeyMap struct {
+	choose key.Binding
+	remove key.Binding
+}
+
+// Additional short help entries. This satisfies the help.KeyMap interface and
+// is entirely optional.
+func (d delegateKeyMap) ShortHelp() []key.Binding {
+	return []key.Binding{
+		d.choose,
+		d.remove,
+	}
+}
+
+// Additional full help entries. This satisfies the help.KeyMap interface and
+// is entirely optional.
+func (d delegateKeyMap) FullHelp() [][]key.Binding {
+	return [][]key.Binding{
+		{
+			d.choose,
+			d.remove,
+		},
+	}
+}
+
+func newDelegateKeyMap() *delegateKeyMap {
+	return &delegateKeyMap{
+		choose: key.NewBinding(
+			key.WithKeys("enter"),
+			key.WithHelp("enter", "choose"),
+		),
+		remove: key.NewBinding(
+			key.WithKeys("x", "backspace"),
+			key.WithHelp("x", "delete"),
+		),
+	}
+}
--- a/ui/root.bak
+++ b/ui/root.bak
@@ -0,0 +1,95 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+package ui
+
+import (
+	"fmt"
+
+	"github.com/charmbracelet/bubbles/key"
+	"github.com/charmbracelet/bubbles/spinner"
+	tea "github.com/charmbracelet/bubbletea"
+	"github.com/charmbracelet/lipgloss"
+	"github.com/tlinden/anydb/cfg"
+)
+
+type model struct {
+	spinner  spinner.Model
+	conf     *cfg.Config
+	quitting bool
+	err      error
+}
+
+var quitKeys = key.NewBinding(
+	key.WithKeys("q", "esc", "ctrl+c"),
+	key.WithHelp("", "press q to quit"),
+)
+
+var (
+	appStyle = lipgloss.NewStyle().Padding(1, 2)
+
+	titleStyle = lipgloss.NewStyle().
+			Foreground(lipgloss.Color("#FFFDF5")).
+			Background(lipgloss.Color("#25A065")).
+			Padding(0, 1)
+
+	statusMessageStyle = lipgloss.NewStyle().
+				Foreground(lipgloss.AdaptiveColor{Light: "#04B575", Dark: "#04B575"}).
+				Render
+)
+
+func InitialModel(conf *cfg.Config) model {
+	s := spinner.New()
+	s.Spinner = spinner.Dot
+	s.Style = lipgloss.NewStyle().Foreground(lipgloss.Color("205"))
+	return model{spinner: s, conf: conf}
+}
+
+func (m model) Init() tea.Cmd {
+	return m.spinner.Tick
+}
+
+func (m model) Update(msg tea.Msg) (tea.Model, tea.Cmd) {
+	switch msg := msg.(type) {
+
+	case tea.KeyMsg:
+		if key.Matches(msg, quitKeys) {
+			m.quitting = true
+			return m, tea.Quit
+
+		}
+		return m, nil
+	case error:
+		m.err = msg
+		return m, nil
+
+	default:
+		var cmd tea.Cmd
+		m.spinner, cmd = m.spinner.Update(msg)
+		return m, cmd
+	}
+}
+
+func (m model) View() string {
+	if m.err != nil {
+		return m.err.Error()
+	}
+	str := fmt.Sprintf("\n\n   %s Loading forever... %s\n\n", m.spinner.View(), quitKeys.Help().Desc)
+	if m.quitting {
+		return str + "\n"
+	}
+	return str
+}
--- a/ui/root.go
+++ b/ui/root.go
@@ -0,0 +1,213 @@
+/*
+Copyright © 2024 Thomas von Dein
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+package ui
+
+import (
+	"github.com/charmbracelet/bubbles/key"
+	"github.com/charmbracelet/bubbles/list"
+	tea "github.com/charmbracelet/bubbletea"
+	"github.com/charmbracelet/lipgloss"
+	"github.com/tlinden/anydb/app"
+	"github.com/tlinden/anydb/cfg"
+)
+
+var (
+	appStyle = lipgloss.NewStyle().Padding(1, 2)
+
+	titleStyle = lipgloss.NewStyle().
+			Foreground(lipgloss.Color("#FFFDF5")).
+			Background(lipgloss.Color("#25A065")).
+			Padding(0, 1)
+
+	statusMessageStyle = lipgloss.NewStyle().
+				Foreground(lipgloss.AdaptiveColor{Light: "#04B575", Dark: "#04B575"}).
+				Render
+)
+
+type Loader struct {
+	items []list.Item
+	conf  *cfg.Config
+}
+
+func (loader *Loader) Update() error {
+	entries, err := loader.conf.DB.List(&app.DbAttr{}, loader.conf.Fulltext)
+	if err != nil {
+		return err
+	}
+
+	loader.items = nil
+
+	for _, entry := range entries {
+		loader.items = append(loader.items, item{
+			title:       entry.Key,
+			description: entry.Preview,
+		})
+	}
+
+	return nil
+}
+
+type model struct {
+	conf         *cfg.Config
+	loader       *Loader
+	quitting     bool
+	err          error
+	list         list.Model
+	keys         *listKeyMap
+	delegateKeys *delegateKeyMap
+}
+
+type listKeyMap struct {
+	toggleSpinner    key.Binding
+	toggleTitleBar   key.Binding
+	toggleStatusBar  key.Binding
+	togglePagination key.Binding
+	toggleHelpMenu   key.Binding
+	insertItem       key.Binding
+}
+
+type item struct {
+	title       string
+	description string
+}
+
+func (i item) Title() string       { return i.title }
+func (i item) Description() string { return i.description }
+func (i item) FilterValue() string { return i.title }
+
+func newListKeyMap() *listKeyMap {
+	return &listKeyMap{
+		insertItem: key.NewBinding(
+			key.WithKeys("a"),
+			key.WithHelp("a", "add item"),
+		),
+		toggleSpinner: key.NewBinding(
+			key.WithKeys("s"),
+			key.WithHelp("s", "toggle spinner"),
+		),
+		toggleTitleBar: key.NewBinding(
+			key.WithKeys("T"),
+			key.WithHelp("T", "toggle title"),
+		),
+		toggleStatusBar: key.NewBinding(
+			key.WithKeys("S"),
+			key.WithHelp("S", "toggle status"),
+		),
+		togglePagination: key.NewBinding(
+			key.WithKeys("P"),
+			key.WithHelp("P", "toggle pagination"),
+		),
+		toggleHelpMenu: key.NewBinding(
+			key.WithKeys("H"),
+			key.WithHelp("H", "toggle help"),
+		),
+	}
+}
+
+func NewModel(config *cfg.Config, entries app.DbEntries) model {
+	var (
+		delegateKeys = newDelegateKeyMap()
+		listKeys     = newListKeyMap()
+		loader       = Loader{conf: config}
+	)
+
+	// Setup list
+	if err := loader.Update(); err != nil {
+		panic(err)
+	}
+
+	delegate := newItemDelegate(delegateKeys, config)
+	dbList := list.New(loader.items, delegate, 0, 0)
+	dbList.Title = "DB Entries"
+	dbList.Styles.Title = titleStyle
+
+	dbList.AdditionalFullHelpKeys = func() []key.Binding {
+		return []key.Binding{
+			listKeys.toggleSpinner,
+			listKeys.insertItem,
+			listKeys.toggleTitleBar,
+			listKeys.toggleStatusBar,
+			listKeys.togglePagination,
+			listKeys.toggleHelpMenu,
+		}
+	}
+
+	return model{
+		list:         dbList,
+		keys:         listKeys,
+		delegateKeys: delegateKeys,
+	}
+}
+
+func (m model) Init() tea.Cmd {
+	return nil
+}
+
+func (m model) Update(msg tea.Msg) (tea.Model, tea.Cmd) {
+	var cmds []tea.Cmd
+
+	switch msg := msg.(type) {
+	case tea.WindowSizeMsg:
+		h, v := appStyle.GetFrameSize()
+		m.list.SetSize(msg.Width-h, msg.Height-v)
+
+	case tea.KeyMsg:
+		// Don't match any of the keys below if we're actively filtering.
+		if m.list.FilterState() == list.Filtering {
+			break
+		}
+
+		switch {
+		case key.Matches(msg, m.keys.toggleSpinner):
+			cmd := m.list.ToggleSpinner()
+			return m, cmd
+
+		case key.Matches(msg, m.keys.toggleTitleBar):
+			v := !m.list.ShowTitle()
+			m.list.SetShowTitle(v)
+			m.list.SetShowFilter(v)
+			m.list.SetFilteringEnabled(v)
+			return m, nil
+
+		case key.Matches(msg, m.keys.toggleStatusBar):
+			m.list.SetShowStatusBar(!m.list.ShowStatusBar())
+			return m, nil
+
+		case key.Matches(msg, m.keys.togglePagination):
+			m.list.SetShowPagination(!m.list.ShowPagination())
+			return m, nil
+
+		case key.Matches(msg, m.keys.toggleHelpMenu):
+			m.list.SetShowHelp(!m.list.ShowHelp())
+			return m, nil
+
+		case key.Matches(msg, m.keys.insertItem):
+			panic(1)
+		}
+	}
+
+	// This will also call our delegate's update function.
+	newListModel, cmd := m.list.Update(msg)
+	m.list = newListModel
+	cmds = append(cmds, cmd)
+
+	return m, tea.Batch(cmds...)
+}
+
+func (m model) View() string {
+	return appStyle.Render(m.list.View())
+}
Author	SHA1	Message	Date
Thomas von Dein	8e257639e0	fixed list items	2025-02-12 18:16:57 +01:00
Thomas von Dein	157a215e87	initial try	2025-02-11 19:13:06 +01:00
Thomas von Dein	83de01b349	fix release builder	2025-02-10 15:49:22 +01:00
Thomas von Dein	b4cf1e4d1c	link to the bug	2025-02-10 15:41:30 +01:00
Thomas von Dein	42dc598deb	Merge branch 'main' of github.com:TLINDEN/anydb	2025-02-10 15:40:05 +01:00
Thomas von Dein	ff169a7198	add warning about #19	2025-02-10 15:39:40 +01:00
T.v.Dein	6c4f119bfa	Fixes and additions: (#20 ) - fix encryption bug #19, which was a regression - added encryption unit test - added debug logging here and there Co-authored-by: Thomas von Dein <tom@vondein.org>	2025-02-10 15:34:04 +01:00
Thomas von Dein	16b6075329	ci tuning	2025-02-10 15:33:21 +01:00
Thomas von Dein	07808187d5	enhance changelog generation, update release builder	2025-02-05 17:49:26 +01:00
T.v.Dein	bc1b08d6f9	fix #16 : add documentation about how to use .Created.AsTime (#18 ) Co-authored-by: Thomas von Dein <tom@vondein.org>	2025-02-03 17:50:28 +01:00
dependabot[bot]	bd5c1e3abb	Bump docker/build-push-action from 6.10.0 to 6.13.0 (#13 ) Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.10.0 to 6.13.0. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](`48aba3b46d...ca877d9245`) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-02-03 17:37:55 +01:00
dependabot[bot]	57026e11aa	Bump actions/setup-go from 1 to 5 (#12 ) Bumps [actions/setup-go](https://github.com/actions/setup-go) from 1 to 5. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v1...v5) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-02-03 17:37:41 +01:00
dependabot[bot]	d0fb560bb2	Bump actions/checkout from 2 to 4 (#14 ) Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v2...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-02-03 17:37:24 +01:00
T.v.Dein	f2bc21e03a	Feat/releasenotes (#17 ) * add release notes, start with PR mode	2025-02-03 17:36:49 +01:00
Thomas von Dein	717510a2f9	fix gifs	2025-02-02 19:45:06 +01:00
T.v.Dein	d794cc8608	Feature/vhs demo (#15 ) * add vhs made demo gif * add support for ANYDB_DB env var * left one section * fixed data type bug, added demo gifs, upgraded dependencies --------- Co-authored-by: Thomas von Dein <tom@vondein.org>	2025-02-02 19:42:12 +01:00
Thomas von Dein	359d134d6e	do not push binaries locally anymore	2025-01-18 10:50:33 +01:00
Thomas von Dein	a674c9c602	build release binaries with ci workflow	2025-01-18 10:48:37 +01:00
Thomas von Dein	e26c61e26f	use correct tag	2025-01-18 10:36:31 +01:00
T.v.Dein	e054d1e530	Add release ci (#11 ) * add release binary builder	2025-01-18 10:32:01 +01:00
Thomas von Dein	9afca91159	fixed crash in api list, added filter support to api list	2025-01-01 18:08:43 +01:00
T.v.Dein	675d10d8fa	Merge pull request #10 from TLINDEN/proto Use protobuf for internal data storage instead of json	2024-12-30 12:33:03 +01:00
Thomas von Dein	659e3472bb	fixed copylocks linter warning	2024-12-30 12:23:13 +01:00
Thomas von Dein	1eb5efae0c	finalized conversion to protobuf: - fixed import+export - generalized file options - always store keys as lowercase - fixed+enhanced docs - fixed tests	2024-12-30 12:12:02 +01:00
Thomas von Dein	bb5c268ca8	todo	2024-12-29 23:29:23 +01:00
Thomas von Dein	a4b6a3cfdf	restructured data storage, values now have their own sub bucket	2024-12-29 18:29:43 +01:00
Thomas von Dein	c144e99b41	switch to use protobuf for internal data structure in DB	2024-12-29 13:01:16 +01:00
Thomas von Dein	2a6a651b91	fix pod bug	2024-12-25 23:53:34 +01:00
Thomas von Dein	33d638aff0	fix typos and formatting	2024-12-23 23:51:17 +01:00
Thomas von Dein	8a8888a3cf	+badges	2024-12-23 20:02:38 +01:00
Thomas von Dein	a590eaf903	+todo	2024-12-23 20:00:48 +01:00
Thomas von Dein	cb6abecaf9	+man page badge	2024-12-23 19:58:51 +01:00
Thomas von Dein	a777c9cab4	added -i option to list to search case insensitive	2024-12-23 19:49:42 +01:00
Thomas von Dein	2f652dc57d	todo	2024-12-23 19:31:50 +01:00
T.v.Dein	f5f3760e67	Merge pull request #9 from TLINDEN/edit Updated manual	2024-12-23 16:23:12 +01:00
T.v.Dein	2253acf19d	Merge branch 'main' into edit	2024-12-23 16:21:26 +01:00
Thomas von Dein	b7e3267695	updated manual	2024-12-23 16:19:27 +01:00
Thomas von Dein	6adeb618b7	add dbtool note	2024-12-22 21:12:16 +01:00
Thomas von Dein	b262c73746	added edit command, fixed set -o -	2024-12-22 17:50:40 +01:00
Thomas von Dein	66d6bd2a41	added edit command, fixed set -o -	2024-12-22 17:46:44 +01:00
Thomas von Dein	fe3951f3c2	more doc, fix format str	2024-12-22 13:28:08 +01:00
Thomas von Dein	249c3f1cfb	bump version	2024-12-22 13:28:08 +01:00
Thomas von Dein	8687e084bf	fixes and additions: - add ANYDB_PASSWORD env var - add config file support, including buckets dict - finalized custom bucket support - fine tuned info support	2024-12-22 13:28:08 +01:00
Thomas von Dein	24240b85f2	fix error checking	2024-12-22 13:28:08 +01:00
Thomas von Dein	8e400c6831	added db info command	2024-12-22 13:28:08 +01:00
Thomas von Dein	3de65aa1c3	add custom bucket support	2024-12-22 13:28:08 +01:00
Thomas von Dein	be79886e89	refactor Import()	2024-12-22 11:29:12 +01:00
T.v.Dein	dc328afa44	Update TODO.md	2024-12-21 09:55:52 +01:00
T.v.Dein	cfa739ac83	Update TODO.md	2024-12-21 07:57:35 +01:00
Thomas von Dein	6de8a6168a	add GPL headers	2024-12-21 00:08:16 +01:00
Thomas von Dein	8d04f798e0	done	2024-12-20 23:27:16 +01:00
Thomas von Dein	c414a8972a	bump version	2024-12-20 23:27:16 +01:00
Thomas von Dein	e6f20f5623	add rest sample	2024-12-20 23:27:16 +01:00
Thomas von Dein	41d9bd6e07	remove requestid, nonsense in our context	2024-12-20 23:27:16 +01:00
Thomas von Dein	e392aa924f	fix serve return error, rename to crud.go	2024-12-20 23:27:16 +01:00
Thomas von Dein	a49aa5b8d0	add set method, add list json req support	2024-12-20 23:27:16 +01:00
Thomas von Dein	6e3fb4ef91	add set method, add list json req support	2024-12-20 23:27:16 +01:00
Thomas von Dein	7bc30da609	started with serve command, yet incomplete	2024-12-20 23:27:16 +01:00
Thomas von Dein	37ca653461	updated docker howto	2024-12-20 12:20:53 +01:00
Thomas von Dein	1119b06330	fix formatting	2024-12-20 12:08:25 +01:00
Thomas von Dein	f93b7bec08	fix error reporting	2024-12-20 11:55:07 +01:00
Thomas von Dein	d94868132d	added -N flag, added -m template support to get and list commands	2024-12-20 11:53:09 +01:00
Thomas von Dein	ba39e3f8cd	added -N flag, added -m template support to get and list commands	2024-12-20 11:51:57 +01:00
Thomas von Dein	b7111002f1	add docker doc	2024-12-19 11:30:35 +01:00