Covert is a secrets management solution written in Rust that leverages SQLCipher for encrypted storage and Litestream for replication. Covert has a very similar API to HashiCorp Vault and takes a lot of inspiration from it, but aims to be a simpler and more affordable option. Some of the features included are:

• Versioned Key-Value secrets
• Dynamic secrets (only PostgreSQL currently)
• Namespaces
• Streaming replication
• Type safe and flexible framework for writing new secrets engines and authentication methods

NOTE: This is a experimental software which is not yet suitable for production use-cases.

Install Covert with Cargo

cargo install covert

Start the Covert server

covert server --config ./config.example.toml

Check out some of the examples in the examples folder.