S3-compatible object storage, without the weight.
v4.3.1: per-bucket encryption + separate console port →
S3-compatible object storage,
without the weight.VaultS3 is a self-hosted, S3-compatible object store in a single binary under 80 MB of RAM, with a built-in dashboard, erasure coding, clustering, encryption, and vector search. The maintained, honest alternative to MinIO.
Get started free View on GitHub
$ `docker run -p 9000:9000 eniz1806/vaults3`
Single
binary, zero deps
<80MB
idle RAM
S3
API compatible
AGPL
open source
Everything in one binary
No add-ons, no paywalled console, no surprise tiers. The features you'd pay for elsewhere ship in the box.
S3-compatible API
SigV4 auth, multipart uploads, versioning, presigned URLs, object tagging, lifecycle, CORS, and bucket policies. Drop-in for the AWS SDKs, aws-cli, rclone, and boto3.
Built-in web dashboard
A real management UI: file browser, bucket config, IAM, audit trail, metrics, search, and replication status. No separate console to license.
Encryption your way
Server-side AES-256-GCM, per-bucket keys with rotation and crypto-shredding for multi-tenant isolation, and SSE-C for fully operator-blind objects.
Erasure coding
Reed-Solomon sharding across disks with a background healer that auto-reconstructs degraded objects. Survives losing whole drives.
Raft clustering
Strongly-consistent metadata via HashiCorp Raft, a consistent-hash placement ring, failure detection, and automatic failover. (Beta)
Active-active replication
Bidirectional replication with vector clocks and pluggable conflict resolution, plus one-way async push between sites.
Semantic / vector search
Built-in RAG retrieval: embed text objects via any OpenAI-compatible endpoint and query by similarity. No separate vector database.
Tiering & backup
Transparent hot/cold tiering to local or remote storage, plus scheduled full/incremental backups.
Runs anywhere
One static binary, an 80MB container, a Helm chart, a Kubernetes operator, or a FUSE mount. amd64 + arm64.
How it compares
An honest look, including where the others are ahead.
| Feature | VaultS3 | MinIO | SeaweedFS | Garage | | --------------------------------- | -------- | -------- | --------- | --------- | | RAM (small deploy) | < 80 MB | 512 MB+ | 50-200 MB | 50-150 MB | | Binary size | \~10 MB | \~100 MB | \~40 MB | \~20 MB | | Single binary | ✓ | ✓ | ✗ | ✓ | | Web dashboard | Built-in | Paid | ✓ | ✗ | | Maintained open source | ✓ | Archived | ✓ | ✓ | | Object versioning | ✓ | ✓ | ✗ | ✗ | | WORM / object lock | ✓ | ✓ | ✗ | ✗ | | S3 Select (SQL) | ✓ | ✓ | ✗ | ✗ | | FUSE mount | Built-in | ✗ | ✓ | ✗ | | Erasure coding | ✓ | ✓ | ✓ | ✗ | | Raft clustering | ✓ | ✓ | ✓ | ✓ | | Active-active replication | ✓ | ✓ | ✗ | ✗ | | Full-text search | ✓ | ✗ | ✗ | ✗ | | Semantic / vector search | ✓ | ✗ | ✗ | ✗ | | Bucket snapshots / rollback | ✓ | ✗ | ✗ | ✗ | | Flat-latency listing (100M+ keys) | ✓ | ✗ | ✓ | ✓ | | Built-in migration UI | ✓ | CLI | CLI | CLI | | Version diff / tags | ✓ | ✗ | ✗ | ✗ | | Lambda triggers | ✓ | ✗ | ✗ | ✗ | | Virus scanning | ✓ | ✗ | ✗ | ✗ | | Rate limiting | ✓ | Paid | ✗ | ✗ | | OIDC / SSO | ✓ | ✓ | ✗ | ✗ |
MinIO archived its community console and project in 2025-2026, moving features to its paid AIStor offering. Comparison as of June 2026; a muted ✗ means not available out of the box.
Spin it up in 30 seconds
One binary or one container. No license key, no account, no telemetry. Just object storage that works.