Encrypted env/config sync CLI for teams. Helps you encrypt, sync, diff, share, and run environment/config files with a local-first workflow and optional relay/S3 storage.
This project is under active development. Until v1.0.0 is released, any version bump may include breaking changes to the CLI interface, config file format, relay protocol, or storage layout. Pin your version if you depend on stable behavior.
Full documentation: vyn.iamick.dev
- AES-256-GCM encryption for all synced blobs and manifests
- GitHub OAuth Device Flow identity (no passwords, no manual username entry)
- SSH-based project key sharing via age - invite embeds vault ID, relay URL, and key so recipients onboard in one command
vyn.toml- non-secret public config committed to Git; enables zero-configvyn pullandvyn clone- One-step onboarding:
vyn clone- finds invite, imports key, pulls all files - Opt-in
.vynignore- track only what you explicitly include - Relay session token caching - no re-auth on every command after
vyn auth - Self-hosted relay server with optional S3 mirroring
cargo install vyn-cli# Linux / macOS
curl -fsSL https://github.com/arnonsang/vyn/releases/latest/download/install.sh | sh
# Windows: download vyn-x86_64-pc-windows-msvc.zip from releasesgit clone https://github.com/arnonsang/vyn.git
cd vyn
cargo install --path crates/vyn-cliSee Installation for Docker build and uninstall options.
vyn init my-project # create vault
vyn config # configure relay storage
vyn auth # GitHub OAuth + SSH verify
vyn push # encrypt and upload
vyn pull # download and decryptmkdir my-project && cd my-project
vyn clone https://relay.example.com <vault_id>crates/vyn-core- crypto, keychain, manifest, storage, diff/merge, p2pcrates/vyn-cli- end-user CLI command surfacecrates/vyn-relay- gRPC relay service implementationproto/vyn.proto- relay API contract
