Self-Hosting Keeplas

Requirements

You need a recent Node toolchain, pnpm, and a Convex deployment. Docker is optional for a containerized dev environment.

• check_circleNode.js 20+ and pnpm 10+ (corepack enable recommended)
• check_circleA Convex deployment -- Convex Cloud or self-hosted (CONVEX_MODE=selfhosted)
• check_circleDocker (optional) for a pinned, containerized dev environment

One-command bootstrap

Clone the repo, then run the bootstrap. It copies your .env.local, installs dependencies, and links per-package env files.

$ git clone https://github.com/Keeplas/keeplas.git
$ cd keeplas
$ pnpm bootstrap

Provision Convex & secrets

Generate the audit HMAC secret, provision your Convex deployment, seed the auth keys, push your env, then boot the app.

$ openssl rand -base64 32   # set KEEPLAS_CTX_SECRET in .env.local
$ npx convex dev --once --configure=new
$ npx @convex-dev/auth          # seeds JWT keys
$ pnpm sync:convex-env
$ pnpm dev

Or use Docker

Prefer containers? The provided Dockerfile.dev pins Node and pnpm to match CI, with source bind-mounted for hot-reload.

$ cp .env.local.example .env.local   # then fill KEEPLAS_CTX_SECRET
$ docker compose up

Deploying to production

The reference deployment targets Vercel for the web app and Convex Cloud for the backend. Because the vault is zero-knowledge, your server only ever holds ciphertext -- self-hosting changes who operates the servers, not who can read your data. Only you can.