nSelf Vault - nself-org/plugins GitHub Wiki
nSelf-managed envelope encryption KMS. Free — MIT licensed.
nself plugin install nself-vaultNo license key required.
nSelf-managed envelope encryption KMS. Provides per-row/column selective encryption with key rotation, audit logging, and Hasura Action surface. Eliminates ad-hoc per-team AES wrappers.
Category: security. Current version: 1.0.0.
| Env Var | Default | Description |
|---|---|---|
DATABASE_URL |
(required) |
PostgreSQL connection string |
VAULT_KEK_V1 |
(required) |
- |
VAULT_KEK_V2 |
- |
- |
VAULT_CURRENT_KEK_VERSION |
1 |
- |
VAULT_ENCRYPT_RATE_RPM |
500 |
- |
VAULT_DECRYPT_RATE_RPM |
1000 |
- |
VAULT_AUDIT_RETENTION_DAYS |
365 |
- |
VAULT_PLUGIN_ENABLED |
false |
- |
| Port | Purpose |
|---|---|
| 3823 | nSelf Vault service port |
nself plugin install nself-vaultManifest: plugins/nself-vault/plugin.json
- Plugin-Marketplace — full plugin index
- Plugin-Development — write your own plugin
← Home →