wtf is vaults3?

VaultS3 is a lightweight, S3 compatible object storage server that ships as a single binary with a built in web dashboard. It is positioned as an alternative to MinIO, SeaweedFS, and Garage, aimed at people who want an S3 compatible store without the memory footprint, multiple components, or licensing changes those other projects have run into. The README specifically calls out that MinIO removed its admin console from the free community edition and archived its open source repository, which is part of the motivation for building VaultS3. The server targets under 80 megabytes of RAM in a small deployment, needs no external database because it stores metadata in an embedded BoltDB key value store, and requires no Docker or other runtime dependencies beyond the compiled binary itself. It implements a large set of the S3 API, including multipart uploads, bucket policies, presigned URLs, range requests, object and bucket tagging, and virtual hosted style URLs, so it should work as a drop in replacement for existing tools built against AWS's S3 client libraries such as the AWS CLI, boto3, or the mc command. Security features include AES 256 GCM encryption at rest with either a static key or HashiCorp Vault backed keys, per bucket encryption keys so different tenants never share a key, and customer provided keys where the client supplies its own encryption key per request. It also supports multi node clustering built on Raft consensus for metadata and a hash ring for placing object data, plus active active replication between sites, though the README labels both of those clustering features as beta rather than fully stable, while the single node mode with erasure coding is described as stable and already running in production. The project is written in Go, released under the AGPL version 3 license, and includes a React based web dashboard, a command line client, Prometheus metrics, and Docker images for deployment. It also supports S3 Select for running SQL queries directly against CSV, JSON, and Parquet files without downloading them first.