OpenVaultSecrets for Docker Compose

Versioned secrets, certificates, access control, and a tamper-evident audit log for projects running in Docker.

Per-service delivery
One agent per Compose service writes secrets to an isolated private directory. The application never talks to the vault.
Real access control
Deny-by-default roles at organization, project, and object scope.
Tamper-evident audit
Every read and denial is hash-chained and authenticated. Verify the chain from the CLI or API.
Runs on Docker Compose
Published images, a hardened reference stack, and a ready-to-run environment-variable example.

Status

OpenVault 1.0 is the first stable release. Current release: 1.0.1.