Free encrypted secret sharing for everyone!
SaaS
Hemmelig is available at https://hemmelig.app
How it works
You enter https://hemmelig.app, write your sensitive information, expire time, optional password, and click create a secret link. You share the secret link. The receiver of the link opens it, writes the optional password, and retrieves the sensitive information. When a secret link is created, it gets its unique encryption key that is not saved to the database and only will be part of the URL. This means NO ONE can decrypt your secret without the encrypt(SECRET_MASTER_KEY + YOUR_UNIQUE_ENCRYPTION_KEY), and access to the Redis instance.
Features
- Encryptet sensitive information sharing.
- Encryptet attachment for signed in users.
- Optional password protection.
- Optional IP address restriction.
- Encryptet key is part of the URL, and not saved to the database for an extra layer of security.
- Available as PWA, which means you can download it as an app for your device.
- It will detect if the secret is base64 encoded, and add a button to convert it to plain text on read.
- Self-hosted version. Keywords: Regulatory compliance.
Docker image
hemmeligapp/hemmelig:latest
Self-hosting
If you have to follow some sort of compliance, and have to self-host, https://hemmelig.app is available as a docker image. The following is the bare minimum to run the docker image.
# To use this image you need a redis database enabled.
# Example:
#
# $ docker run -p 6379:6379 --name some-redis -d redis
#
docker run -p 3000:3000 -d --name=hemmelig \
-e SECRET_MASTER_KEY=11111222223333344444555556666677 \ # has to be a secret key of 32 characters
-e SECRET_REDIS_HOST=127.0.0.1 \
hemmeligapp/hemmelig:latest
Have a look at the Dockerfile for a full example of how to run this application.
Environment variables
SECRET_LOCAL_HOSTNAMEDefault: 0.0.0.0. - The local hostname for the fastify instanceSECRET_PORTDefault: 3000. - The port number for the fastify instanceSECRET_HOSTDefault: "". - Used for i.e. set cors to your domain nameSECRET_MASTER_KEYDefault: 11111222223333344444555556666677 - Override this with your SECRET master key for encryption of your secretsSECRET_REDIS_HOSTDefault: 0.0.0.0 - Override this for your redis host adressSECRET_REDIS_PORTDefault: 6379 - The redis port numberSECRET_REDIS_TLSDefault: false - If the redis instance is using tlsSECRET_REDIS_USERDefault: "" - You redis user nameSECRET_REDIS_PASSWORDDefault: "" - Your redis passwordSECRET_JWT_SECRETDefault: good_luck_have_fun - Override this for the secret signin JWT tokens for log inSECRET_DO_SPACES_ENDPOINTDefault: "" - The Spaces endpointSECRET_DO_SPACES_KEYDefault: "" - The Spaces keySECRET_DO_SPACES_SECRETDefault: "" - The Spaces secretSECRET_DO_SPACES_BUCKETDefault: "" - The Spaces bucket nameSECRET_DO_SPACES_FOLDERDefault: "" - The Spaces folder for uploadingSECRET_MAX_TEXT_SIZEDefault: "256" - The max text size for the secret. Is set in kb. i.e. 256 for 256kb.
Run locally
$ npm install
# Start the frontend
$ npm run client-dev
# http://0.0.0.0:8080
# Start the backend
$ npm run server-dev
# http://0.0.0.0:3000
![[DOCS] SECRET_DISABLE_USERS vs SECRET_USER_DISABLE=true](https://avatars.githubusercontent.com/u/41785417?v=4)
9 Dec 17, 2022
8 Dec 28, 2022
3 Oct 18, 2022
6 Sep 4, 2022
2 Jun 7, 2022
12 Oct 30, 2022
115 Jan 3, 2023
46 Nov 24, 2022
43 Dec 24, 2022
10 Sep 16, 2022
13 Jul 25, 2022
96 Dec 27, 2022
8 Apr 8, 2022
11 Aug 8, 2022
14 Dec 15, 2022
8 Jul 27, 2022
5 Oct 5, 2022
10 Nov 24, 2022
31 Jul 27, 2022