Keep the vault SaaS
Non-engineers rotate secrets through a shared control plane, or you already standardized on Vault or a cloud KMS.
Self-hosted env sync
Keep encrypted configs on hosts you already run
Most teams copy .env files by hand or rent a secrets product. EnvSync is the agent that keeps encrypted config in sync on machines you already pay for.
Config drift is how deploys fail and secrets leak. A hosted vault is one more login and one more invoice. EnvSync Agent is a zero-trust local process: encrypt the store, sync the targets, keep production env on disk you control.
What the agent does
01
Encrypt
Key-value store for .env values. Nothing travels unprotected.
02
Sync
Real-time daemon across VPS hosts, laptops, and microservices.
03
Audit
Dashboard for sync status and logs. REST API if you want it in CI.
When a hosted secrets product is the wrong default
Run EnvSync
The stack is already self-hosted. You want encrypted config on the same hosts, not another tenant.
After checkout, binaries and source land in your member files. The EnvSync product page has the license.
Setup is one agent
Pay once on Whop, download the agent from your member files, run it on each host that needs the env. There is no account to create.
./envsync-agent
- 01
Download the agent binary from your member files.
- 02
Initialize the encrypted store and add the first target host.
- 03
Confirm sync status in the dashboard. Hook the REST API if CI needs it.
EnvSync
Own the config sync
$99one-time, lifetime license
- Zero-trust local agent
- Encrypted key-value store
- Real-time sync across hosts
- Dashboard and REST API
Checkout stays on Whop. You get the source after payment.
Questions people ask before they switch
Is this a Vault or Doppler replacement?
For syncing encrypted .env values across hosts you already run, yes. If you need an org-wide secrets platform with human approval flows, keep Vault. EnvSync is the agent that stops config drift.
Are values encrypted?
Yes. The key-value store is encrypted end to end. Sensitive config does not travel in the clear.
Where does the data sit?
On the hosts you deploy the agent to. There is no vendor tenant holding production secrets.
Do I need Docker?
No. EnvSync is a lightweight agent binary. Run it on bare metal, in a container, or next to the service that reads the env.
Keep reading
Guide
Self-hosted cron alternative
Stop paying a monthly bill to fire HTTP on a timer. NexusCron is a self-hosted cron alternative you deploy with Docker on machines you already own.
Guide
EasyCron and cron-job.org alternative
Compare EasyCron, cron-job.org, and other hosted cron products with NexusCron. Same job, no subscription, logs and secrets stay on your disk.
Guide
Migrate off EasyCron to a self-hosted runner
Step-by-step migration from EasyCron to a self-hosted cron runner. Export jobs, map cron expressions, Docker Compose, HTTP pings, and cutover without downtime.
Guide
Migrate cron jobs off cloud providers to self-hosted
Technical guide for migrating cron jobs off cloud providers to self-hosted NexusCron. Architecture, Docker Compose, job mapping, and cutover without missed pings.
Guide
Replace cloud cron services with self-hosted NexusCron
Architecture, Docker Compose, production env vars, and cutover for replacing hosted cron with NexusCron on a VPS you already run. One lifetime payment.
Guide
Migrate EasyCron jobs to self-hosted NexusCron
Architecture, Docker Compose, and cost math for replacing $20–$50/month hosted cron with NexusCron on a VPS you already run. One lifetime payment.
Guide
Self-hosted webhook router
A self-hosted webhook router that receives, transforms, and forwards events on your infrastructure. One payment. No Zapier tax for simple routing.
Guide
Replace cloud webhook services with self-hosted Webhook Router
Architecture, Docker Compose, and config mapping to replace Hookdeck, Svix, Zapier, and Make with NexusCore Webhook Router on your VPS. One lifetime payment.
Guide
Replace cloud webhook queues with local SQLite routing
Technical architecture for replacing cloud webhook queues with local SQLite routing. Production Docker Compose, under 50MB RAM, WAL mode, retries, and dead-letter replay.
Guide
Self-hosted pipeline setup
NexusPipeline is a FastAPI Docker execution engine. Clone it, compose up, and keep job state on disk you control. One payment. No worker SaaS.
Guide
Self-hosted admin dashboard setup
NexusAdmin is the self-hosted dashboard that sits next to NexusPipeline. One payment, Docker Compose, no SaaS admin tenant.
Guide
Self-hosted log stream setup
LogStream is a single-binary Node.js collector. HTTP and UDP ingest, SQLite, live dashboard, webhook alerts. One payment. No observability SaaS.
Guide
Self-hosted API proxy setup
API Proxy Service sits between your code and upstream APIs. Retries, rate limits, fallbacks, circuit breakers. One payment. No gateway SaaS.