Architecture overview
A self-hosted Enkryptify deployment requires:- API server: the Fastify backend that handles all business logic and encryption
- Web application: the Next.js dashboard for managing secrets
- PostgreSQL: primary database for storing encrypted secrets and metadata
- Redis: for caching and rate limiting
- AWS KMS: for envelope encryption key management
Infrastructure requirements
- An AWS account with KMS access for envelope encryption
- PostgreSQL 17+ database with TLS
- Redis 8+ for caching and rate limiting
- A domain and TLS certificate for HTTPS