Self-hostingCopy Anchor Link

Self-hosting is free. You pay AWS for one Graviton instance with enclaves (about $50 a month for c6g.large) and a KMS key ($1 a month).

What gets createdCopy Anchor Link

infra/aws/stack.yaml is one CloudFormation stack:

• an S3 bucket for releases and logs
• a KMS key whose policy only allows kms:Decrypt from the enclave image you built
• a c6g.large instance with Nitro enclaves on, an Elastic IP, and ports 80 and 443 open
• a DynamoDB table (KeysTable) for sealed key records, on demand billing, with deletion protection and point-in-time recovery
• an IAM role limited to the bucket, the key and the table

The host runs Postgres, the dashboard, the demo and Caddy for TLS. The gateway runs in the enclave and reads and writes sealed records in KeysTable directly.

The landing page and these docs are not part of the stack. They deploy to Vercel from apps/site.

Deploy with GitHub ActionsCopy Anchor Link

1. Create an IAM user with admin rights for the first deploy.
2. Add repository secrets: AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, and optionally AWS_REGION (default us-east-1).
3. Run the AWS deploy workflow.

The workflow builds the enclave on the host, reads its PCR0, locks the KMS key to it, starts everything, and checks the endpoints. The run summary lists your URLs:

Gateway (in the enclave): https://gw.<your-ip>.sslip.io
Dashboard:                https://app.<your-ip>.sslip.io
Demo chat:                https://demo.<your-ip>.sslip.io

Deploy from your machineCopy Anchor Link

export AWS_REGION=us-east-1
bash infra/aws/deploy.sh

Needs the AWS CLI, jq and admin credentials.

Tear downCopy Anchor Link

Run the AWS teardown workflow, or bash infra/aws/teardown.sh. The KMS key enters a 7 day deletion window; every key it wrapped becomes unrecoverable after that.

Run locallyCopy Anchor Link

No AWS needed. A local master key stands in for KMS:

bun install
bun run prototype --mock

This starts the dashboard on :3000, the demo chat on :3001 and the gateway on :8787. --mock uses a fake OpenAI that logs the last four characters of the key it received, so you can see decryption happen.

Gateway environmentCopy Anchor Link