kuukura
kuukura is a self-hosted secrets vault for small teams: values are decrypted only on your server, reveals require a passkey, and every access is audit-logged. Requires a Google OAuth client ID and secret, set in the Environment tab before deploying.
Deploy kuukura on Dokploy
- Install Dokploy on your server if you haven't already.
- In your Dokploy panel, open a project and click Create Service → Template.
- Search for kuukura and click Create — Dokploy configures domains, environment variables, and volumes for you.
Alternatively, create a Compose service, go to Advanced → Import from Base64, and paste this payload:
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
Configuration
The exact Docker Compose and template configuration this template deploys.
Related Templates
Cachkey
Version: 0.1.0
Cachkey is an open-source, self-hosted manager for secrets and environment variables: encrypted values, per-environment access for your team, a CLI and a read-only API for servers and CI.
CertMate
Version: 2.21.3
CertMate is an SSL certificate management system with a web UI and REST API. It automates issuing and renewing Let's Encrypt certificates via DNS-01 challenges across 20+ DNS providers, with unified backups and multi-account support.
OpenResty Manager
Version: 1.2.0
The easiest using, powerful and beautiful OpenResty Manager (Nginx Enhanced Version) , open source alternative to OpenResty Edge, which can enable you to easily reverse proxy your websites with security running at home or internet, including Access Control, HTTP Flood Protection, Free SSL, without having to know too much about OpenResty or Let's Encrypt.
Pocket ID
Version: 2.14.0
Pocket ID is a simple OpenID Connect and OAuth 2.0 provider that lets users authenticate to applications with passkeys.
Vault
Version: 2.0.3
Vault is HashiCorp's tool for securely storing and managing secrets and encryption keys. Self-host it on your own server with Dokploy, which deploys Vault as a Docker Compose service in a few clicks.
Ackee
Version: latest
Ackee is a self-hosted analytics tool for your website.
Self-host kuukura in minutes
Dokploy is a free, open source deployment platform. Deploy kuukura and 585+ other templates on your own infrastructure with a single click.