Heartlock Documentation

A self-hosted, Infisical-like secrets manager. Store, organize, and inject secrets across projects and environments; access them from a web UI, a REST API, or a single-binary CLI. Secrets are encrypted at rest with Fernet, sessions can be federated through any OIDC provider, and everything runs on your own infrastructure.

Getting Started

• Quickstart
  • Prerequisites
  • Local development
  • Docker Compose (production)
  • First-run onboarding
  • Building the CLI

Configuration

• Server Configuration
  • Core settings
  • Encryption at rest
  • Database
  • CORS and CSRF
  • OIDC single sign-on
  • Email / SMTP
  • Production hardening
  • Docker image details
  • Security notes
• CLI Configuration
  • Installing
  • Building from source
  • Commands
  • Configuration file
  • Configuration precedence
  • API endpoints used by the CLI

Reference

• API Reference
  • Authentication
  • Roles and permissions
  • Health
  • Authentication endpoints
  • Service tokens
  • Projects
  • Project members
  • Project invitations
  • Environments
  • Secrets
  • Onboarding / setup
  • Superuser administration
  • OIDC SSO flow