kodiqa-solutions/vaults3 — explained in plain English
Analysis updated 2026-05-18
Run a self hosted, S3 compatible storage server for an app that currently uses AWS S3.
Replace MinIO after it removed its free admin dashboard, keeping the same S3 API your tools already use.
Set up per bucket encryption keys so different tenants' data stays isolated in a shared storage server.
| kodiqa-solutions/vaults3 | gitlawb/zero | mitchellh/hashstructure | |
|---|---|---|---|
| Stars | 793 | 803 | 768 |
| Language | Go | Go | Go |
| Last pushed | — | — | 2023-01-03 |
| Maintenance | — | — | Dormant |
| Setup difficulty | moderate | easy | easy |
| Complexity | 3/5 | 2/5 | 2/5 |
| Audience | ops devops | developer | developer |
Figures from each repo's GitHub metadata at analysis time.
Single binary or Docker image, clustering and active-active replication are still labeled beta.
VaultS3 is a lightweight, S3 compatible object storage server that ships as a single binary with a built in web dashboard. It is positioned as an alternative to MinIO, SeaweedFS, and Garage, aimed at people who want an S3 compatible store without the memory footprint, multiple components, or licensing changes those other projects have run into. The README specifically calls out that MinIO removed its admin console from the free community edition and archived its open source repository, which is part of the motivation for building VaultS3. The server targets under 80 megabytes of RAM in a small deployment, needs no external database because it stores metadata in an embedded BoltDB key value store, and requires no Docker or other runtime dependencies beyond the compiled binary itself. It implements a large set of the S3 API, including multipart uploads, bucket policies, presigned URLs, range requests, object and bucket tagging, and virtual hosted style URLs, so it should work as a drop in replacement for existing tools built against AWS's S3 client libraries such as the AWS CLI, boto3, or the mc command. Security features include AES 256 GCM encryption at rest with either a static key or HashiCorp Vault backed keys, per bucket encryption keys so different tenants never share a key, and customer provided keys where the client supplies its own encryption key per request. It also supports multi node clustering built on Raft consensus for metadata and a hash ring for placing object data, plus active active replication between sites, though the README labels both of those clustering features as beta rather than fully stable, while the single node mode with erasure coding is described as stable and already running in production. The project is written in Go, released under the AGPL version 3 license, and includes a React based web dashboard, a command line client, Prometheus metrics, and Docker images for deployment. It also supports S3 Select for running SQL queries directly against CSV, JSON, and Parquet files without downloading them first.
A single binary, S3 compatible object storage server with a built in web dashboard, using under 80MB of RAM, aimed at replacing MinIO or SeaweedFS.
Mainly Go. The stack also includes Go, BoltDB, React.
AGPL v3: you can use and modify it freely, but if you run a modified version as a network service, you must make your source code available to its users.
Setup difficulty is rated moderate, with roughly 30min to a first successful run.
Mainly ops devops.
This repo across BitVibe Labs
double-check against the repo, no cap.