DreyVault

Run your server

DreyVault is one small container. Run it on a home server, a NAS, a Raspberry Pi, an always-on Mac or PC, or a cheap cloud server. It needs Docker and about 512 MB of memory.

One command

On Linux or macOS with Docker installed:

curl -fsSL https://dreyvault.abhishekm.work/install.sh | sh

The installer asks how devices should reach the vault, generates secrets, writes everything to ~/dreyvault, starts the server and prints its address. Run it again any time to change settings; it keeps your secrets. Read the script before running it if you like.

HTTPS optionBest for
Cloudflare TunnelReaching your vault from anywhere without opening ports. Needs a free Cloudflare account and a domain.
Tailscale ServeOnly your own devices, wherever they are. Nothing is public.
Caddy + Let's EncryptA cloud server or a home server with port forwarding and a domain.
Home network onlyNever reachable from the internet. Each device trusts a local certificate once.

Docker Compose

If you already run a reverse proxy, add DreyVault to your own Compose file:

services:
  dreyvault:
    image: ghcr.io/dreyfvr/dreyvault:2
    restart: unless-stopped
    environment:
      SERVER_SECRET: ${SERVER_SECRET}   # openssl rand -hex 32
      RP_ID: vault.example.com
      RP_ORIGIN: https://vault.example.com
      SIGNUP: invite
    ports: ["127.0.0.1:3000:3000"]
    volumes: [dreyvault_data:/data]
volumes:
  dreyvault_data:

Point your proxy at port 3000. All settings are in the configuration reference.

NAS and home-server app stores

Umbrel

Install with the DreyVault app template (deploy/umbrel) through a community app store.

CasaOS

App Store → Custom Install → Import, then paste the DreyVault compose file and set the secret.

Unraid

Docker → Add Container with the DreyVault template, then fill in the secret and your address.

TrueNAS SCALE

Apps → Install via YAML with the DreyVault compose file and a dataset for its data.

Templates are in the deploy/ folder of the source repository.

Desktop server mode In development

The DreyVault desktop app for macOS, Windows and Linux will also run the server itself, with a tray icon and start at login, so an always-on computer can host your vault without Docker. Until it ships, use the installer above.

After installing

  1. Open your server's address and create your account. The first account becomes the admin.
  2. In Admin → Backups, set a backup passphrase and store it somewhere safe. Add an offsite target (S3, R2, WebDAV, Google Drive or Dropbox).
  3. In Admin → Accounts, invite the people who should have their own vault.
  4. Install the extension or app on each device and enter the server address.

The admin can manage accounts but can never open, reset or recover anyone's vault. Each person keeps their own recovery kit.

Updating is one command: cd ~/dreyvault && docker compose pull && docker compose up -d. The admin panel tells you when an update is out. Full guide: self-hosting docs.