nSelf Vault

nSelf Vault Plugin

nSelf-managed envelope encryption KMS. Free — MIT licensed.

Install

nself plugin install nself-vault

No license key required.

Description

nSelf-managed envelope encryption KMS. Provides per-row/column selective encryption with key rotation, audit logging, and Hasura Action surface. Eliminates ad-hoc per-team AES wrappers.

Category: security. Current version: 1.0.0.

Configuration

Env Var	Default	Description
DATABASE_URL	(required)	PostgreSQL connection string
VAULT_KEK_V1	(required)	-
VAULT_KEK_V2	-	-
VAULT_CURRENT_KEK_VERSION	1	-
VAULT_ENCRYPT_RATE_RPM	500	-
VAULT_DECRYPT_RATE_RPM	1000	-
VAULT_AUDIT_RETENTION_DAYS	365	-
VAULT_PLUGIN_ENABLED	false	-

Ports

Port	Purpose
3823	nSelf Vault service port

Examples

nself plugin install nself-vault

Source

plugins/nself-vault/

Manifest: plugins/nself-vault/plugin.json

See Also

• Plugin-Marketplace — full plugin index
• Plugin-Development — write your own plugin

← Home →