Keep stored images encrypted

API.md

@@ -79,4 +79,4 @@ POST /api/archive?p=PASSWORD
 Content-Type: image/png
 ```
 
-Stores the PNG in the current date's image directory without requesting a GPU.
+Stores the PNG encrypted as `.epng` in the current date's image directory without requesting a GPU.

app.py

@@ -92,7 +92,7 @@ SALT_SIZE = 16
 NONCE_SIZE = 12
 SCRYPT_N = 2**14
 FILE_MAGIC = b"EPNG1"
-IMAGE_SUFFIXES = (".epng", ".png")
+IMAGE_SUFFIXES = (".epng",)
 PREVIEW_QUALITY = 75
 PREVIEW_SCALE = .25
 DEFAULT_RETURN_SCALE = 1
@@ -1664,8 +1664,6 @@ def natural_key(path):
 
 def stored_bytes(path):
     data = path.read_bytes()
-    if path.suffix.casefold() == ".png":
-        return data
     if not data.startswith(FILE_MAGIC):
         raise HTTPException(500, "invalid encrypted image")
     salt_start = len(FILE_MAGIC)