Open source · AGPL v3

S3 Storage That
Doesn't Eat RAM

Self-hosted S3-compatible object storage in a single binary. Built-in dashboard, under 80MB RAM. The lightweight alternative to MinIO.

$ docker pull eniz1806/vaults3
VaultS3 Dashboard Demo
50+
S3 Operations
<80MB
RAM Usage
~10MB
Binary Size
133+
Test Cases

Everything You Need,
Nothing You Don't

Full S3 compatibility with a built-in dashboard, security hardening, and features that competitors charge enterprise pricing for.

Built-in Dashboard

React-based web UI embedded in the binary. File browser, IAM management, audit trail, search, dark mode. No separate web server.

5 Rounds of Security

60+ security fixes. AES-256-GCM encryption, SigV4 auth, path traversal protection, SSRF prevention, rate limiting, CSP headers.

S3 Select (SQL)

Query CSV and JSON objects with SQL without downloading. SELECT, WHERE, LIKE, AND/OR, LIMIT — right from the S3 API.

Object Versioning & WORM

Per-bucket versioning with git-like diff viewer. Legal hold and retention (GOVERNANCE/COMPLIANCE). One-click rollback.

FUSE Mount

Mount any bucket as a local directory. LRU block cache, metadata caching, SigV4 auth. Read and write support built-in.

Lambda Triggers

Invoke external functions on S3 events. Webhook-based with event filtering, optional response storage. Worker pool dispatch.

IAM & OIDC/SSO

Users, groups, and policies with S3-compatible policy evaluation. OIDC login with Google, Keycloak, Auth0. Role mapping.

Full-text Search

Search across all buckets by key, content type, and tags. In-memory index with LRU eviction cap and incremental updates.

Event Notifications

Webhooks, Kafka, NATS, and Redis backends. Per-bucket event filtering with key prefix/suffix matching. Virus scanning support.

How VaultS3 Stacks Up

Feature-by-feature comparison with popular S3-compatible storage solutions.

VaultS3 MinIO SeaweedFS Garage
RAM (small deploy) < 80 MB 512 MB+ 50-200 MB 50-150 MB
Single binary
Web dashboard Built-in Built-in
Object versioning
WORM / Object lock
S3 Select (SQL)
FUSE mount Built-in Buggy
Full-text search
Version diff / tags
Lambda triggers
Virus scanning
Rate limiting Paid
OIDC / SSO
Binary size ~10 MB ~100 MB ~40 MB ~20 MB

Up and Running in 30 Seconds

One command. That's it. No databases, no dependencies, no configuration files.

# Pull and run with Docker
docker run -d \
  --name vaults3 \
  -p 9000:9000 \
  -e VAULTS3_ACCESS_KEY=myadmin \
  -e VAULTS3_SECRET_KEY=mysupersecret \
  -v vaults3-data:/data \
  -v vaults3-meta:/metadata \
  eniz1806/vaults3

# S3 API → http://localhost:9000
# Dashboard → http://localhost:9000/dashboard/
# Metrics → http://localhost:9000/metrics