Containervault
Batteries-included container registry dashboard with multi-registry browsing, native auth, vulnerability scanning, notifications, and analytics.
SAby SpecZip Admin
Free seed library
v1.1.1
2 downloads0 views
File Integrity
sha256:c10b2990…· 109 KBRecommended Stack
| Component | Role | Version | Notes |
|---|---|---|---|
| Next.js | frontend framework | >=14.0.0 | App Router with React Server Components. Provides both UI and API routes. |
| TypeScript | language | >=5.0 | Strict TypeScript. All API responses validated with Zod schemas at the edge. |
| React | ui library | >=18.0.0 | Server and client components. Server state via TanStack Query, never useState for server data. |
| Tailwind CSS | styling | >=4.0.0 | Utility-first CSS with custom design tokens for Containervault's dark-first palette. |
| shadcn/ui | component library | latest | Copy-paste components. Customize to match Containervault's design system. |
| Lucide React | icons | latest | All icons. Never use emoji or webfont icons. |
| SQLite | database | latest | Embedded database. PRAGMA journal_mode = WAL enabled for concurrent reads. |
| better-sqlite3 | database driver | latest | Synchronous SQLite driver with native performance. Suitable for serverless and long-running deployments. |
| Drizzle ORM | orm | latest | Type-safe schema and query builder. Migrations in /database/migrations. |
| Zustand | ui state | latest | Lightweight client-side state for UI prefs (sidebar collapse, recent items). NEVER for server data. |
| TanStack Query | server state | latest | All server state management. Cache, invalidation, optimistic updates. |
| Recharts | simple charts | latest | Used for sparklines and small series on dashboards. |
| Apache ECharts | complex charts | latest | Used for the analytics dashboard's multi-series time-series charts. |
| React Hook Form | forms | latest | Performant forms with built-in validation and error handling. |
| Zod | validation | latest | Schema validation. Same Zod schemas used at API edge and in client forms. |
| Sonner | toast notifications | latest | All user-facing notifications. Never use alert() or confirm(). |
| Nodemailer | email delivery | latest | SMTP client. STARTTLS and TLS support. Used for outbound email notifications. |
| openid-client | OIDC | latest | OIDC authentication. Compatible with any compliant identity provider (Keycloak, Authelia, PocketID, Authentik, Google Workspace, GitHub, GitLab). |
| bcrypt | password hashing | latest | Local password storage. Min 8 chars enforced at signup. bcrypt rounds = 12. |
| speakeasy | TOTP 2FA | latest | Time-based one-time passwords for two-factor authentication. |
| jose | JWT/sessions | latest | Session token generation and verification. Used with HTTP-only cookies. |
| node-cron | scheduling | latest | In-process scheduling for Trivy DB updates, retention sweeps, scan schedules. |
| Trivy | vulnerability scanner | latest | External binary invoked as subprocess. Reads manifests from registries, returns JSON CVE results. |
| Docker Distribution | bundled registry backend (optional) | latest | Optional bundled registry backend. Activated when BUILTIN_REGISTRY=true. Provides push/pull immediately without external setup. |
Requirements
| API Key | Purpose | Free Tier |
|---|---|---|
| Postmark | ✓ | |
| AWS S3 | Description:** Retention rules with daily sweeps. S3 archival with reversible cold/archive tier transitions. | ✓ |
External Services
- PostgreSQLself-hostable
- MySQLself-hostable
- SQLiteself-hostable
- Redisself-hostable
- Dockerself-hostable
- MinIOself-hostable
- Nginxself-hostable
Platform Notes
- •Requires Docker and Docker Compose
Data Model
users
user_api_keys
sessions
backup_codes
registries
repository_scopes
cached_repositories
cached_tags
scans
scan_vulnerabilities
scan_policies
notification_channels
smtp_configs
subscriptions
notification_events
notification_dispatches
retention_rules
s3_configs
archival_rules
storage_quota
audit_log
config_categories
configs
Blueprint for containervault
External Dependencies
- 🔴dockerinfrastructureRequired
Containerized deployment of Containervault or underlying OCI registry (Docker Distribution or Zot)
- 🟡smtp serverserviceOptional
SMTP server (Gmail, Mailgun, SendGrid, or self-hosted Postfix) for outbound email notifications. Optional — webhooks and RSS work without it.
- 🟡s3-compatible storagestorageOptional
S3-compatible object storage (AWS S3, Cloudflare R2, MinIO, Backblaze B2) for cold/archival storage of retired image blobs. Optional — without it, archival is disabled.
Tags
Container-registry
Docker
Kubernetes
Oci
Vulnerability-scanning
Trivy
Image-management
Registry-browser
Multi-registry
Analytics
Rss
Webhooks
Notifications
Self-hosted
Devops
Next.js
TypeScript
Dashboard
Alerts
Security
Sqlite
Local-first
Dark-theme
Details
- Category
- utilities
- Difficulty
- high
- Version
- 1.1.1
- Published
- 6/27/2026
Related Blueprints
Coming soon...