seklok
v0.0.1
Published
Lightweight self-hosted secrets vault. AES-256 encryption, per-project master keys, RBAC, ~18MB footprint.
Maintainers
Readme
seklok
Lightweight self-hosted secrets vault. 18MB RAM. AES-256 encryption.
Features
- Per-project master keys (in-memory only, never stored)
- Service tokens with embedded encryption keys
- RBAC: read / write / admin scopes
- SQLite storage, zero external dependencies
- Cross-language crypto compatibility (TypeScript ↔ Python)
- Admin UI with Basic Auth
- Docker-ready with health checks
Quick Start
Coming soon. Package is currently reserving the name.
License
Apache-2.0 — see LICENSE and NOTICE.
If you fork this project, you must retain the NOTICE file and attribute the original authors.
Support
If you use Seklok in a business context, please consider sponsoring:
- GitHub Sponsors
- Star this repo
Your support keeps the project alive.
