Buckets & access keys
Create buckets and issue S3 access keys from the panel. No Garage CLI, no config files — buktio talks to the engine over its network APIs.
Open source · Apache-2.0 · Self-hosted
A free, self-hosted control plane for your S3 storage
buktio is a web panel, REST API, and CLI for S3-compatible object storage. Create buckets, issue access keys, browse objects, set CORS and lifecycle rules, and watch usage — all from one panel you run yourself.
# 1. start the whole stack (panel + API + Garage + Postgres + Caddy) $ docker compose up -d ✔ buktio-web running ✔ buktio-api running ✔ garage running # bundled, unmodified ✔ postgres running ✔ caddy running # 2. open the panel and finish first-run setup $ open https://localhost
in deploy/docker-compose
Why now
The self-hosted S3 panel gap is real
Three dated, verifiable facts that pushed us to build buktio. Please verify current repo status yourself.
MinIO removed its free console UI
On 2025-02-26 MinIO removed almost all management features (buckets, keys, policies, lifecycle, replication, IAM/SSO) from its free web console, leaving essentially a read-only object browser — shipped to users around 2025-05-24.
source dated 2025-02-26 / 2025-05-24
Garage has no official UI
Garage (by the Deuxfleurs collective, in production since ~2020) is excellent storage, but it is managed only via CLI and config files. A community panel exists as a hobby project. buktio gives it a real panel.
Garage in production since ~2020
~$0.09/GB vs $0 egress
AWS S3 egress is about $0.09 per GB — roughly $900 to download 10 TB in a month. Self-hosted storage has $0 egress; Cloudflare R2 is $0 egress; Backblaze B2 is low-cost with cheap/free egress.
AWS egress pricing, public list price
Note: MinIO the company is alive and sells a commercial product. What changed is the free open-source experience. We keep this factual, not adversarial.
The free core
Everything you need to run object storage
The OSS core is fully functional with no artificial limits — unlimited buckets, keys, objects, and nodes.
Object browser
Search, upload whole folders, copy, move, and rename. In-panel previews for images, video, and text. Time-limited share links. App-level trash with restore and auto-purge.
CORS & lifecycle rules
Edit CORS in a real UI. Set lifecycle rules for object expiry and aborting incomplete multipart uploads — no hand-written JSON.
Usage & traffic metrics
See storage usage and per-key traffic metering in the panel. A Prometheus /metrics endpoint plugs into your existing monitoring.
Encryption built in
Optional client-side encryption (SSE-C) for objects. Engine secrets are encrypted at rest with AES-256-GCM envelope encryption; passwords use argon2id.
Clusters & website hosting
Run multi-node Garage clusters and multiple clusters, or connect an existing one. Host public static websites straight from a bucket.
REST API & CLI
A Go REST API with Bearer-auth API tokens (PATs), plus a cobra-based CLI: status, logs, restart, doctor, backup, restore, upgrade, cluster.
Backups you control
Manual backups of metadata and config via pg_dump. Backups never include your KEK or object data — keep your encryption key separate, by design.
Modern panel
Next.js + TypeScript + shadcn/ui frontend, PostgreSQL 16 as system of record. A guided first-run wizard creates your admin.
Single binary, every arch
The whole panel is embedded in one Go binary — no separate web service. Multi-arch images run on a Raspberry Pi or any ARM server. Install with Docker, .deb/.rpm, Homebrew, or an Unraid/CasaOS template.
Object versioning
On backends that support it, keep prior versions of objects and restore or delete any version straight from the panel.
Event webhooks
Fire an HTTP webhook when objects are created or deleted — HMAC-signed, with retries. Storage that plugs into your automation.
Cross-backend replication
Copy or sync a bucket from one backend to another — for example, mirror a local Garage bucket to an off-site S3 provider. Re-runs only copy what changed.
Bring your own storage
One panel over any S3
Use the bundled Garage engine, or point buktio at external S3 backends — managed through the same interface.
GarageBundled default · full control plane
AWS S3Object ops · capability gaps reported
Cloudflare R2$0 egress backend
Backblaze B2Low-cost, cheap egress
SeaweedFSSelf-hosted S3 backend
Ceph RGWSelf-hosted S3 backend
WasabiLow-cost hot storage
StorjDecentralized S3 gateway
HetznerEU object storage
Google CloudS3 interop
MinIOS3-compatible backend
Honest about gaps: on external backends, control-plane features like key management, quotas, cluster health, and website hosting may be unavailable — buktio reports these capability gaps honestly. Object operations work everywhere.
Open core, honest pricing
Free core. Paid team features.
The free core never gains artificial limits. Paid editions add new capabilities for teams and companies — they never remove something that was free. Licensing is offline, with no phone-home.
Free
$0 / forever · Apache-2.0
Self-hosters, homelabbers, and developers who want a real S3 panel.
- Web panel, buckets, S3 access keys
- Object browser, trash, presigned URLs
- CORS editor & lifecycle rules
- Usage metrics, per-key metering, Prometheus
- API tokens (PATs) & manual metadata backups
- Multi-node & multi-cluster Garage
- Multi-backend, SSE-C, website hosting
- No artificial limits, ever
For teams
Pro
Paid / adds team features
Small teams that need access control, SSO, and scheduled off-box backups.
- Everything in Free
- RBAC (role-based access control)
- Members, invitations, seats
- OIDC SSO (single sign-on)
- Advanced audit export
- Scheduled + off-box (external) backups
Enterprise
Paid / talk to us
Organizations needing hard multi-tenancy, quotas, and compliance.
- Everything in Pro
- Hard multi-tenancy via Postgres RLS
- Tenant suspend/resume & per-org quotas
- Per-org dedicated clusters
- SCIM 2.0 provisioning & ABAC policies
- Tamper-evident hash-chained audit + SIEM
- White-label branding & custom domains
- Helm, K8s operator, Terraform, systemd
There is also a Hosted / SaaS edition we operate: self-serve signup, per-tenant cluster provisioning, usage-based billing (storage GB-month + egress + requests), and resumable S3-to-S3 migration.
Quickstart
Up and running with one command
A single Docker Compose stack. No external dependencies to install first.
-
Clone the repo
Grab the source from github.com/buktio/buktio.
-
Go to the compose dir
Everything lives in
deploy/docker-compose. -
Bring up the stack
Run
docker compose up -d. Panel, API, Garage, Postgres, and Caddy start together. -
Open the panel
Visit
https://localhost(self-signed TLS in local dev) and finish the first-run wizard to create your admin.
# clone $ git clone https://github.com/buktio/buktio $ cd buktio/deploy/docker-compose # start the whole stack $ docker compose up -d # then open the panel and create your admin $ open https://localhost # (self-signed cert in local dev — accept it once)
copy & paste