Vaulthalla Logo

Runtime Paths

Reference for Vaulthalla configuration, runtime, state, log, mount, SQL, web, Nginx, and TPM paths.

Runtime Paths

Use this reference when backing up, troubleshooting, or verifying package layout.

Core Paths

PathPurpose
/etc/vaulthalla/config.yamlMain runtime configuration.
/run/vaulthallaRuntime sockets and transient secrets.
/var/lib/vaulthallaVaulthalla state, local vault bodies, cache/index state, and sealed blobs.
/var/log/vaulthallaLog location where file logging is configured.
/mnt/vaulthallaFUSE filesystem mount.
/usr/share/vaulthalla/psqlPackaged SQL schema and migration assets.
/usr/share/vaulthalla-webPackaged web runtime.
/var/cache/vaulthalla-webWeb runtime cache.

Services

ServicePurpose
vaulthalla.serviceCore daemon.
vaulthalla-cli.socketLocal CLI socket activation.
vaulthalla-cli.serviceCLI socket service.
vaulthalla-web.serviceWeb console runtime.
vaulthalla-swtpm.serviceManaged software TPM fallback.

Network Defaults

ListenerDefault
Web runtime127.0.0.1:36968
WebSocket server127.0.0.1:36969
Preview HTTP server127.0.0.1:36970
Software TPM127.0.0.1:2321 and 127.0.0.1:2322

These listeners are intended for local service wiring and Nginx proxying, not direct public exposure.

Nginx Paths

PathPurpose
/usr/share/vaulthalla/nginx/vaulthalla.confPackaged Nginx template.
/etc/nginx/sites-available/vaulthallaManaged site configuration.
/etc/nginx/sites-enabled/vaulthallaEnabled site symlink.
/var/lib/vaulthalla/nginx_site_managedMarker for package-managed Nginx state.

Use sudo vh setup nginx and sudo vh teardown nginx instead of editing managed state by hand when possible.

TPM Paths

PathPurpose
/dev/tpmrm0Preferred hardware TPM resource manager device.
/dev/tpm0Hardware TPM fallback device.
/var/lib/swtpm/vaulthallaSoftware TPM state.

Sealed key blobs are stored in Vaulthalla state. Treat TPM and sealed key state as sensitive backup material.

CLI Socket

The CLI connects to:

1/run/vaulthalla/cli.sock

If vh fails with a permission error:

1ls -l /run/vaulthalla/cli.sock2id3getent group vaulthalla4systemctl status vaulthalla-cli.socket