krishnaalagiri/ssm repository overview

Secure storage, and delivery for tokens, passwords, API keys, and other secrets using HTTP API, Swagger UI or Python Package.

⁠Supported tags and respective Dockerfile⁠ links

• 1.2.0, 1.2, 1, latest⁠
• 1.1.2, 1.1⁠
• 1.1.1⁠
• 1.1.0⁠
• 1.0.0, 1.0⁠

⁠Quick reference (cont.)

• Where to file issues: https://github.com/bearlike/simple-secrets-manager/issues⁠
• Supported architectures: (more info⁠) amd64, arm64v8

⁠Why does this exist?

Hashi Corp Vault works well but it was meant for enterprises. Therefore, it was heavy and non-portable (atleast difficult) for my homelab setup. So I wanted to build a Secrets Manager intended for small scale setups that could also scale well.

⁠Goals

• A lightweight system that sucks less power out of the wall. Therefore, minimal background jobs and reduced resource utilizations.
• Should be compatible on both x86-64 and arm64v8 (mainly Raspberry Pi 4).
• High stability, availability and easy scalability.

⁠Available secret engines

⁠Available authentication methods

⁠Getting started

⁠Automated Install: docker-compose⁠ (Recommended)

1. Run the stack⁠ by executing docker-compose up -d.
2. Stop stack by executing docker-compose down

version: '3'
volumes:
  mongo_data:

services:
  # From v5.0.0, mongoDB requires atleast ARMv8.2-A microarchitecture to run.
  # So we're going with v4 to improve compatibility on SBCs such as
  # Raspberry Pi 4 and Odroid C2 with ARMv8.0-A
  mongo:
    image: mongo:4
    restart: always
    environment:
      MONGO_INITDB_ROOT_USERNAME: root
      MONGO_INITDB_ROOT_PASSWORD: password
    volumes:
      - mongo_data:/data/db
    networks:
      - app-tier

  ssm-app:
    image: krishnaalagiri/ssm:latest
    restart: always
    depends_on:
      - mongo
    ports:
      - "5000:5000"
    environment:
      CONNECTION_STRING: mongodb://root:password@mongo:27017
      PORT: 5000
    networks:
      - app-tier

networks:
  app-tier:
    driver: bridge