Servers
Secrets on servers without files on disk
A .env file on a server outlives every deploy and ends up in backups. How an agent with a lease delivers secrets from memory, and what it cannot hide.
Servers
Delivering secrets to servers without .env files on disk: enrolling machines, agents with leases, revocation and what a running process still holds.
Latest posts
Self-hosting
Self-hosting a secrets vault: choosing a platform
Docker on a VPS, Cloudflare Workers, Vercel or Cloud Run? What changes between platforms for a blind-server vault, and the two decisions you make only once.
Example. Kiteline is a fictional company.