# Mocó

> Self-hosted secret management for your homelab. Manage application credentials through the API, CLI or Kubernetes controller.

## Documentation

- [Mocó secret management for your homelab](<https://moco.araihu.com/>): Store application secrets on your own infrastructure. Manage them through the API, CLI or Kubernetes controller, and deliver values to workloads with External Secrets Operator.
- [Get started](<https://moco.araihu.com/getting-started/>): Run Moco locally and use its CLI with table, JSON and CSV output.
- [Guides](<https://moco.araihu.com/guides/>): Run Moco locally, install a release, manage secrets and access, and prepare backups and recovery.
- [Transactional audit](<https://moco.araihu.com/guides/audit/>): Understand audited commits, rollback behavior, retention and operational checks.
- [Backup and restore](<https://moco.araihu.com/guides/backup-restore/>): Verify backups, preserve historical root keys and restore an offline database.
- [CLI](<https://moco.araihu.com/guides/cli/>): Build and use the Moco command-line client, generated from OpenAPI overlays.
- [Controller and CRDs](<https://moco.araihu.com/guides/controller/>): Declare tenants, vaults and authorization with the Moco Kubernetes controller.
- [ESO and cluster acceptance](<https://moco.araihu.com/guides/eso/>): Deliver Moco values through ESO and validate the published artifacts in vind.
- [Installation](<https://moco.araihu.com/guides/installation/>): Install the released server, controller and Helm charts with explicit storage and credentials.
- [Load and failures](<https://moco.araihu.com/guides/load-faults/>): Run bounded capacity and fault acceptance with retained reports.
- [Production SQLite](<https://moco.araihu.com/guides/production/>): Single-instance production configuration, TLS, mirrored backups, metrics and recovery.
- [Security and keys](<https://moco.araihu.com/guides/security/>): Configure scoped authentication, authorization, audit and root-key rotation.
- [Reference](<https://moco.araihu.com/reference/>): Look up Moco API operations, Helm values and schemas, architecture, development checks and release results.
- [Controller Helm chart](<https://moco.araihu.com/reference/controller-chart/>): Controller chart values, CRDs, scoped credentials and RBAC.
- [Development](<https://moco.araihu.com/reference/development/>): Architecture, repository layout, toolchain and development checks.
- [OpenAPI pipeline](<https://moco.araihu.com/reference/openapi-pipeline/>): Contracts, Vacuum bundles and separate CLI naming metadata overlays.
- [Release 0.0.3 evidence](<https://moco.araihu.com/reference/release-0.0.3/>): Published image identities, 21-scenario vind and ESO acceptance, and test limits.
- [Releases](<https://moco.araihu.com/reference/releases/>): SemVer publication of OCI images, digest-pinned Helm charts and release assets.
- [Server Helm chart](<https://moco.araihu.com/reference/server-chart/>): Server chart values, JSON Schema, storage, TLS, networking and Helm tests.

## Project

- [Source repository](<https://github.com/araihu/moco>)