CloudVault v1.0.2 — Official PostgreSQL

Changes

• Switched to official postgres:18.3-alpine — replaced Bitnami PostgreSQL dependency with custom template using the official Docker image
• Zero CVEs in PostgreSQL image (Alpine-based, pinned version)
• Custom StatefulSet with PVC persistence, liveness/readiness probes
• No external chart dependency — chart is now self-contained

Images

Component	Image	Vulnerabilities
CloudVault	shyamkrishna21/cloudvault:latest	0 critical, 0 high
PostgreSQL	postgres:18.3-alpine	0 detected

Install

helm repo add cloudvault https://implyfree.github.io/cloudvault
helm repo update
helm install cloudvault cloudvault/cloudvault --namespace cloudvault --create-namespace

CloudVault v1.0.1 — Security Fixes

Security Fixes

• Docker: Upgraded from node:20-alpine to node:22-alpine
• npm: Fixed all critical/high vulnerabilities:
  • fast-xml-parser (CVE-2026-25896, CVE-2026-26278, CVE-2026-25128)
  • tar (CVE-2026-23745, CVE-2026-23950, CVE-2026-24842, CVE-2026-26960)
  • cross-spawn (CVE-2024-21538)
  • minimatch (CVE-2026-26996, CVE-2026-27903, CVE-2026-27904)
  • glob (CVE-2025-64756)
• Helm: Updated PostgreSQL dependency from chart 16.4.1 to 18.4.1 (PostgreSQL 18.2.0)
• Default tag: Helm chart now uses latest Docker image tag

Images

Tag	Platforms
shyamkrishna21/cloudvault:v1.0.1	linux/amd64, linux/arm64
shyamkrishna21/cloudvault:latest	linux/amd64, linux/arm64

CloudVault v1.0.0

🚀 CloudVault v1.0.0

The first production-ready release of CloudVault — a self-hosted, multi-cloud storage manager.

✨ Features

Multi-Cloud Support

• GCP (Google Cloud Storage) with resumable uploads and service account auth
• AWS S3 with access key / secret key authentication
• Azure Blob Storage with connection string auth
• Oracle Cloud (OCI) Object Storage support
• S3-Compatible providers (MinIO, Wasabi, Backblaze B2, etc.)

Upload Engine

• Resumable uploads for large files (100MB+) — survives network interruptions
• Concurrent uploads — upload multiple files simultaneously without conflicts
• Real-time progress with speed (MB/s) and ETA tracking per upload
• Background jobs — dismiss uploads to background and start new ones
• Pause / Resume / Stop controls for all active uploads
• Global upload banner visible across all pages with browser close protection

Admin & Permissions

• Role-based access control — admin, cost manager, and regular users
• Granular bucket permissions — view, upload, download, delete, share, edit per user per bucket
• Permission groups — bulk assign permissions to groups of users
• Cloud provider management — add, edit, remove providers from the admin panel

File Management

• File browser — browse, download, delete, and manage files in any connected bucket
• Folder uploads — upload entire directory structures with preserved paths
• File sharing — generate expiring share links with optional password protection
• Download tracking — all downloads are logged for audit/compliance

Cost & Analytics

• Storage analytics — per-bucket size tracking with historical graphs
• Upload/download logging — full audit trail of all operations
• Cost estimation — estimated storage costs per provider

Security

• Encrypted credentials — cloud provider credentials are AES-256 encrypted at rest
• JWT authentication with configurable secret
• Rate limiting on all API endpoints
• Security headers (CSP, X-Frame-Options, HSTS)
• Non-root container with dropped capabilities

📦 Deployment

Docker

docker pull shyamkrishna21/cloudvault:v1.0.0

Multi-arch image supporting linux/amd64 and linux/arm64.

Helm Chart

helm install cloudvault ./helm/cloudvault

• Bundled PostgreSQL (Bitnami) or bring your own
• Auto-generated JWT & encryption keys (preserved across upgrades)
• Database migrations run automatically via init container
• PodDisruptionBudget for high availability
• GKE Gateway API support

Docker Compose

docker-compose up -d

🔧 Configuration

Variable	Description	Default
DATABASE_URL	PostgreSQL connection string	Required
JWT_SECRET	Secret for JWT tokens	Auto-generated
ENCRYPTION_KEY	64-char hex key for credential encryption	Auto-generated
ADMIN_PASSWORD	Initial admin password	admin
PORT	Server port	3001

📋 Requirements

• Node.js 20+
• PostgreSQL 14+
• Docker (for containerized deployment)
• Kubernetes 1.28+ (for Helm deployment)

---

Docker Hub: shyamkrishna21/cloudvault
Source: github.com/implyfree/cloudvault