https://github.com/hugginsio/kv2
Encrypted secret management for the homelab.
https://github.com/hugginsio/kv2
Last synced: 7 months ago
JSON representation
Encrypted secret management for the homelab.
- Host: GitHub
- URL: https://github.com/hugginsio/kv2
- Owner: hugginsio
- License: bsd-3-clause
- Created: 2025-03-14T00:01:53.000Z (7 months ago)
- Default Branch: main
- Last Pushed: 2025-03-14T00:20:01.000Z (7 months ago)
- Last Synced: 2025-03-14T01:25:27.475Z (7 months ago)
- Language: Go
- Homepage:
- Size: 27.3 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 3
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# 🔐 kv2
> [!WARNING]
> `kv2` is still v0. Breaking changes are expected.
`kv2` is a versioned, encrypted, key-value secrets manager for the homelab. This module provides the server and client components, as well as the reference CLI implementation. The `kv2` server is:
- **Simple**: available as a single binary or Docker container. The only interface is a REST API.
- **Lightweight**: the simplicity of the service allows it to run almost anywhere, such as free tier VMs on hyperscale providers.
- **Secure**: secrets are encrypted at rest, and the server is designed to integrate with [Tailscale][0] for controlling API access.
While these traits make `kv2` perfect for my homelab, it may not be suitable for production environments.
## 📚 Documentation
The full documentation is available in the [docs](./docs/) directory.
## 🚀 Quickstart
Alternatively, if you are just looking to move fast and break things:
```sh
docker run --rm --name kv2 -p 80:8080 -e KV2_DEV_MODE=true ghcr.io/hugginsio/kv2:latest
```
## 🤝🏻 Thanks
- [@tailscale/setec][9], which largely inspired `kv2`.
---
"Tailscale" is a registered trademark of Tailscale Inc. The `kv2` project is not endorsed by, sponsored by, or affiliated with Tailscale Inc.
[0]: https://tailscale.com/
[9]: https://github.com/tailscale/setec