Bastion Vault
A self-hosted, cryptographically secure secrets engine engineered for homelabs, featuring machine identities, short-lived tokens, and bulk .env streaming for stateless infrastructure automation.
The Narrative
Engineered a Zero-Knowledge Spring Boot backend where AES-256 keys are dynamically derived in-memory via PBKDF2, ensuring master passwords are never stored.
Implemented a Machine Identity system with one-time Client Secrets, generating short-lived (15-minute) bearer tokens to secure CI/CD pipelines against compromised scripts.
Developed versatile REST APIs supporting both bulk .env streaming for container orchestration and granular JSON responses for Terraform/Ansible integrations, isolated via compound database indexing.
Designed a premium Vaadin Flow frontend with Glassmorphism aesthetics, featuring dynamic application grouping, upsert logic for duplicate prevention, and shadow-DOM protection.
Tags
Links
System Highlights
Cryptography
AES-256 encryption with PBKDF2 key derivation and BCrypt authentication ensures true zero-knowledge storage.
Machine Identities
Dedicated access control issues short-lived 15-minute automation tokens for secure CI/CD pipeline integration.
Versatile APIs
Supports both bulk .env streaming for Docker Compose and granular JSON lookups for dynamic provisioning.
Vaadin UI
Premium Java-driven dashboard featuring dynamic application groups, interactive accordions, and shadow-DOM protection.
