S3-compatible object storage,
without the weight.
VaultS3 is a self-hosted, S3-compatible object store in a single binary under 80 MB of RAM — with a built-in dashboard, erasure coding, clustering, encryption, and vector search. The maintained, honest alternative to MinIO.
docker run -p 9000:9000 eniz1806/vaults3 
Everything in one binary
No add-ons, no paywalled console, no surprise tiers. The features you'd pay for elsewhere ship in the box.
S3-compatible API
SigV4 auth, multipart uploads, versioning, presigned URLs, object tagging, lifecycle, CORS, and bucket policies. Drop-in for the AWS SDKs, aws-cli, rclone, and boto3.
Built-in web dashboard
A real management UI — file browser, bucket config, IAM, audit trail, metrics, search, and replication status. No separate console to license.
Encryption your way
Server-side AES-256-GCM, per-bucket keys with rotation and crypto-shredding for multi-tenant isolation, and SSE-C for fully operator-blind objects.
Erasure coding
Reed-Solomon sharding across disks with a background healer that auto-reconstructs degraded objects. Survives losing whole drives.
Raft clustering
Strongly-consistent metadata via HashiCorp Raft, a consistent-hash placement ring, failure detection, and automatic failover. (Beta)
Active-active replication
Bidirectional replication with vector clocks and pluggable conflict resolution, plus one-way async push between sites.
Semantic / vector search
Built-in RAG retrieval — embed text objects via any OpenAI-compatible endpoint and query by similarity. No separate vector database.
Tiering & backup
Transparent hot/cold tiering to local or remote storage, plus scheduled full/incremental backups.
Runs anywhere
One static binary, an 80MB container, a Helm chart, a Kubernetes operator, or a FUSE mount. amd64 + arm64.
How it compares
An honest look — including where the others are ahead.
| Feature | VaultS3 | MinIO | SeaweedFS | Garage |
|---|---|---|---|---|
| RAM (small deploy) | < 80 MB | 512 MB+ | 50–200 MB | 50–150 MB |
| Binary size | ~10 MB | ~100 MB | ~40 MB | ~20 MB |
| Single binary | ✓ | ✓ | – | ✓ |
| Web dashboard | Built-in | Paid | ✓ | – |
| Maintained open source | ✓ | Archived | ✓ | ✓ |
| Object versioning | ✓ | ✓ | – | – |
| WORM / object lock | ✓ | ✓ | – | – |
| S3 Select (SQL) | ✓ | ✓ | – | – |
| FUSE mount | Built-in | – | ✓ | – |
| Erasure coding | ✓ | ✓ | ✓ | – |
| Raft clustering | ✓ | ✓ | ✓ | ✓ |
| Active-active replication | ✓ | ✓ | – | – |
| Full-text search | ✓ | – | – | – |
| Semantic / vector search | ✓ | – | – | – |
| Bucket snapshots / rollback | ✓ | – | – | – |
| Flat-latency listing (100M+ keys) | ✓ | – | ✓ | ✓ |
| Built-in migration UI | ✓ | CLI | CLI | CLI |
| Version diff / tags | ✓ | – | – | – |
| Lambda triggers | ✓ | – | – | – |
| Virus scanning | ✓ | – | – | – |
| Rate limiting | ✓ | Paid | – | – |
| OIDC / SSO | ✓ | ✓ | – | – |
MinIO archived its community console and project in 2025–2026, moving features to its paid AIStor offering. Comparison as of June 2026; "–" means not available out of the box.
Spin it up in 30 seconds
One binary or one container. No license key, no account, no telemetry — just object storage that works.