mtenekeci/vestyn-server repository overview

⁠Vestyn — API server

Vestyn is a self-hosted, zero-knowledge, end-to-end encrypted password manager. This image is the API server (Rust). It stores only ciphertext — all encryption and decryption happens on your devices, never on the server.

This image is one part of a three-container stack (Postgres + server + web). It won't do much by itself — deploy it alongside mtenekeci/vestyn-web and Postgres using the compose file and full setup guide at vestyn.app/self-hosting.html⁠.

⁠Quick reference

• Listens on: 8080 (internal — put the web image in front, not this one, directly)
• Required env: DATABASE_URL
• Data volume: /data — holds the signing key used to sign access tokens
• Healthcheck: built-in, /vestyn-server --healthcheck

⁠Tags

• edge — latest build from main, moves on every push
• X.Y.Z — immutable, versioned releases (recommended for anything you rely on)
• sha-<shortsha> — traceability tag matching a specific commit

⁠License and source

AGPL-3.0. The source repository is not yet public — we're doing a security and history review before publishing it during the alpha. Every versioned release of this image is accompanied by a downloadable Corresponding Source archive matching that exact tag, satisfying AGPL-3.0 §6(d): vestyn.app/self-hosting.html⁠ links to the current one, or construct the URL directly: https://downloads.vestyn.app/Vestyn-docker-X.Y.Z-source.tar.gz.

Full setup guide: https://vestyn.app/self-hosting.html⁠ Security model: https://vestyn.app/security.html⁠