pikaConfig Manager

General configuration server, secrets manager, and personal vault with a beautiful web UI and a powerful API.

Get started

View on GitHub

📝

Multi-format configs

Store and serve JSON, YAML, and TOML. Convert between formats on the fly with a single query parameter.

🌿

Versions & variants

Every save creates a new version. Tag versions with semver constraints and keep per-environment variants (prod, staging, dev) side by side.

🔗

Config inheritance

Pull values from Vault, Kubernetes Secrets, Consul, etcd, AWS, GCP, Azure, plain HTTP, or other pika files — all merged into a single resolved config.

🔐

Encryption at rest

Optional XChaCha20-Poly1305 envelope encryption with key rotation. Your secrets stay encrypted on disk.

🔒

Personal vault

Built-in end-to-end encrypted password and TOTP vault per user, with recovery kits and session locking.

🪝

Event hooks

Push config and personal-vault changes to HTTP webhooks, Kafka, Redis Pub/Sub, or NATS — with custom Go templates for the payload.

🔑

Token-based access

Issue API tokens with glob-scoped read/write/delete permissions. Plug in OAuth2/OIDC, LDAP, or header-based forward auth.

🌐

Cluster-ready

Run a 3+ node HA cluster with QUIC peer discovery and leader-elected writes. Drop-in Kubernetes manifests included.

Quick start

docker run -d --name pika -v pika:/data -p 8080:8080 ghcr.io/rakunlabs/pika:latest

Open https://localhost:8080 and create the initial admin account. The first-start certificate is self-signed.

Next steps

Read the getting-started guide, set up authentication, or skip straight to consuming data if you already have a server running.