Vaulthalla Logo

Vaulthalla

The Final Cloud | Forged for Valhalla

No PHP. No Bloat. No App Store. No Bullshit.

v1.1.0 Live Now

⚡️ Vaulthalla | The Final Cloud ⚡️

Vaulthalla is for people who refuse to rent back their own data.

No subscriptions.
No telemetry.
No middlemen.

Battle-hardened C++ daemon.
Encrypted like state secrets.
Mounted directly into your filesystem.

v1.4 release banner

Welcome to the kernel.

Featured

The Service Watchdog Reigns Supreme

Should I ship multiple daemons as independent services? Or should I deploy a single daemon with multiple threaded services and an internal watchdog?

Published:

Built on principles

Not features. Not trends. Rules.

Local first

If it is not in your filesystem, you do not fully control it. Vaulthalla is built around local presence, operator visibility, and files that behave like files.

Real security

Keys sealed. Defaults strict. Safety enforced by architecture instead of handed to the user as an optional checkbox.

Native performance

No runtime stack pretending to be infrastructure. No needless layers. Just compiled speed where the storage path actually matters.

No bloat

No plugin carnival. No app-store gravity. No creeping scope dressed up as flexibility. The system stays sharp because the boundaries stay sharp.


What this enables

Vaulthalla does not feel like another cloud app.

It feels like part of your system.

Filesystem native

Mounted through FUSE so your data behaves like local files, because from the operator’s point of view, that is exactly how it should feel.

Live session auth

No blind token spam. No dead sessions pretending to be trust. If the control plane is not alive, access does not get to cosplay as valid.

Hardware-sealed keys

TPM2-backed key handling keeps secrets anchored to the machine instead of floating around as plaintext waiting to become someone else’s trophy.

Real storage backbone

PostgreSQL for state. S3-compatible storage for objects. Durable, portable, predictable primitives instead of storage magic with a logo on it.

C++ & libfuse3 Core Daemons

Welcome to the Kernel, Brother.

No web-proxy. No bullshit.


Interfaces without friction

Use it how you want. No ceremony. No compromise.

Native CLI

Scriptable, fast, and built for the place operators already live. Automate it, inspect it, wire it into real workflows.

WebSocket core

Real-time behavior is part of the control plane, not a feature bolted on after the system already chose the wrong shape.

Web UI

A clean, responsive interface for managing vaults, files, sharing, permissions, previews, and system state without hiding the underlying model.


Synchronization that makes sense

No mystery sync engine. No invisible hand waving. Just explicit modes for how data should move.

Cache

Pull what you need. Drop what you do not. Keep local storage lean while preserving fast access to active working sets.

Sync

Two-way movement for active vaults where local and remote state both matter, with conflict awareness where reality gets messy.

Mirror

One-way truth for backups, replication, and controlled distribution. Perfect when the source of authority should not be ambiguous.


Security without theater

Security is not a feature badge.

It is enforced behavior.

TPM2-sealed keys

Hardware-backed key sealing keeps secrets tied to trusted machine state instead of treating plaintext key material like an acceptable operational detail.

End-to-end encryption

AES-256-GCM protects file content with modern authenticated encryption where it matters: before storage becomes someone else’s problem.

Enforced strength

Weak credentials do not pass. Unsafe defaults do not get normalized. The system should reject bad security before it becomes user policy.