self-host · free

Your server. Your keys.

Orbit is free to run yourself. Your work, your secrets and your history live on a server you control.

on your computer

One command, with Docker

$ curl -fsSL https://orbitwork.sh/selfhost.sh | sh

Needs Docker running. It starts Postgres and the Orbit API, keeps your encryption key in ~/.orbit-server, and prints a one-time setup token. Open qu2, choose My own server, enter http://localhost:8080 and paste the token. Run it again any time to upgrade.

in your aws account

Launch Stack, for a team

A CloudFormation template that sets up the API on ECS, a managed Postgres database that's kept across upgrades, private storage and cloud runtimes, all in your own account. You upgrade by changing the image tag.

Email me@tino.nz for the template link and the install guide while we publish them here.

How your secrets are kept

● Secrets are encrypted at rest with AES-256-GCM, using a key only your server holds.
● Once saved, a secret can't be read back by the app, the API or the CLI. You can only replace or delete it.
● Agents never see raw keys. A broker adds them to requests on the way out.
● No OAuth apps and no call home. You bring your own keys and choose who you trust.