# Vault

Vault is a self-hosted backup app. HashiCorp Vault is a centralized secrets management platform that provides secure storage, dynamic secret generation, and identity-based access control for API keys, credentials, and encryption keys. It is open source and self-hosted, installable on Docker Hub, Kubernetes (Helm) and Unraid.

Canonical page: https://ourlocalhost.com/app/328/vault

## Description

HashiCorp Vault is a centralized secrets management platform that provides secure storage, dynamic secret generation, and identity-based access control for API keys, credentials, and encryption keys. It helps homelab administrators and DevOps teams automate secret rotation, encrypt data at rest, and enforce fine-grained access policies without manually distributing credentials across services.

## Platform availability

Available on 2 of 9 platforms: Unraid, Helm.

## Health score

75/100 (Good), based on 4 of 4 factors.
- Maintained: 100 (last commit 16 days ago)
- Popular: 91 (36,350 GitHub stars)
- Easy to install: 45 (2 install platforms, install notes, Docker image)
- Light to run: 20 (8 GB minimum RAM, runs on ARM)

## Links

- GitHub: https://github.com/hashicorp/vault
- Docker Hub: https://hub.docker.com/r/hashicorp/vault
- Documentation: https://developer.hashicorp.com/vault
- Kubernetes (Helm): https://artifacthub.io/packages/helm/hashicorp/vault
- Unraid: https://ca.unraid.net/apps/vault-0emab0a15yyyzy?q=Vault
- Official website: https://www.hashicorp.com/products/vault

## Common questions

### Why might Vault Agent not create secret files for an app?

Pass Vault Agent the correct HCL settings file path with -config. Without that path, the agent cannot reach Vault or render the expected secret files.

### How does Vault protect secrets before they are written to storage?

Vault encrypts data before writing it to persistent storage. This means access to the raw storage alone is not enough to access the secrets.

### What observability information should I use when troubleshooting Vault?

Use the observability data Vault provides to help resolve issues. It is part of the basic troubleshooting workflow.

---
Source: Our Local Host (https://ourlocalhost.com/app/328/vault), the self-hosted and open-source app directory.