Envy – Secrets manager for teams
GoGinPostgreSQLReactViteTailwindCSSDockerCLI
Envy is a full-stack secrets management platform with organization and workspace multi-tenancy, role-based access, audit logging, AWS KMS envelope encryption, and a Go CLI for secure runtime secret injection.
Key Features
AES-256-GCM encryption with AWS KMS envelope encryption (fallback in dev)
Google OAuth authentication flow
Organizations, projects, environments, and secret CRUD with RBAC
CLI login + pull to write secrets to local .env files
Docker Compose deployment with reverse proxy
Challenges
Designing secure encryption boundaries across API, DB, and CLI
Building a reliable OAuth + token flow across web + CLI
Balancing DX (one-command pull) with least-privilege access
Key Learnings
Envelope encryption and practical secret-management patterns
RBAC modeling for teams and environments
Deploying full-stack systems with Docker + reverse proxying
Duration
—
Role
Full-stack Engineer
Status
in-progress