Architecture overview
A self-hosted Enkryptify deployment requires:- API server — the Fastify backend that handles all business logic and encryption
- Web application — the Next.js dashboard for managing secrets
- PostgreSQL — primary database for storing encrypted secrets and metadata
- Redis — for caching and rate limiting
- AWS KMS — for envelope encryption key management
Infrastructure requirements
- An AWS account with KMS access for envelope encryption
- PostgreSQL 17+ database with TLS
- Redis 8+ for caching and rate limiting
- A domain and TLS certificate for HTTPS