Back to all templates
Onetime Secret logo

Onetime Secret

Infrastructure256MB+ RAM

Self-hosted secret-sharing service that destroys messages after a single view - powered by Redis/Valkey

infrastructurestorageonetimesecretopen-sourceself-hosteddocker

Deploy Onetime Secret in 3 Steps

1

Connect Your VPS

Add your server credentials to Server Compass

2

Select Onetime Secret

Choose from our template library

3

Deploy & Configure

Fill in settings and click Deploy

No Docker knowledge required
Step-by-step deployment guide

Deploy Onetime Secret on a VPS with Server Compass

Use the Onetime Secret template in Server Compass to deploy a self-hosted one-view secret sharing service with Redis on your VPS, then verify the web UI in a browser.

About 10 minutesBrowser verified
1
Step 1

Open the server Apps tab

Select the tutorial-vps VPS, open the Apps tab, and start a new app deployment. Keep sensitive server details hidden before capturing or sharing screenshots.

Server Compass Apps tab before creating an Onetime Secret app
2
Step 2

Choose an app template

Click New App and choose the template deployment path so Server Compass can load the built-in catalog.

Choosing to deploy an app from a Server Compass template
3
Step 3

Search for Onetime Secret

Use the template picker search to find Onetime Secret in the Server Compass template catalog.

Searching for Onetime Secret in the Server Compass template picker
4
Step 4

Select the Onetime Secret template

Choose the Onetime Secret template. Server Compass fills the web service, Redis dependency, public host setting, encryption secret, admin email, and Redis password.

Onetime Secret template selected in Server Compass
5
Step 5

Review the Onetime Secret settings

Confirm the app name, web UI port, public host value, and generated secrets. In this run, the app was named onetime-secret-demo and used host port 4089.

Reviewing Onetime Secret project settings and compose service
6
Step 6

Deploy Onetime Secret

Review the generated compose settings, confirm the Onetime Secret web port is available, and click Deploy.

Reviewing Onetime Secret web port before deployment
7
Step 7

Watch the deployment progress

Keep the deployment modal open while Server Compass uploads the compose file, pulls the Onetime Secret and Redis images, starts the containers, and verifies the stack.

Server Compass deploying the Onetime Secret template on the VPS
8
Step 8

Confirm Onetime Secret is running

After deployment finishes, return to the Apps tab and confirm the Onetime Secret app is marked Running with its application URL available.

Onetime Secret template running in the Server Compass Apps tab
9
Step 9

Open Onetime Secret in the browser

Open the application URL in a browser. The Onetime Secret page confirms the secret sharing service is reachable.

The deployed Onetime Secret web UI loaded in a browser

After Onetime Secret Opens

  • Register or sign in with the colonel email to claim administrative access.
  • Configure SMTP before relying on email-based secret delivery.
  • Put Onetime Secret behind HTTPS and set `SSL=true` before production use.
  • Back up the Redis volume if preserving in-flight secrets matters.
  • Do not rotate the `SECRET` value unless you are willing to invalidate existing stored secrets.

Verified Result

The Onetime Secret web interface loaded successfully from the deployed container.

Onetime Secret deployment questions

What does the Onetime Secret template deploy?

It deploys the Onetime Secret web app with a Redis backend for one-view secret storage.

Which port did the tutorial use?

The tutorial used host port 4089, which maps to the Onetime Secret web UI on container port 3000.

Does Onetime Secret need setup after deployment?

Yes. Claim the colonel account, configure SMTP, and put the service behind HTTPS before sharing production secrets.

Should this become a blog post?

No. The deployment guide should live on the onetime-secret template detail page and be linked from the reusable template deployment docs page.

After Deployment

After deploying Onetime Secret with Server Compass, complete these steps to finish setup

1

Open the URL and register the COLONEL email to claim the admin account

2

Configure SMTP under the admin panel so secret-creation emails can be sent

3

(Recommended) Put the app behind HTTPS and set SSL=true and HOST to your real domain

4

Share the URL with your team; encourage them to use a custom passphrase for sensitive secrets

Need help? Check out our documentation for detailed guides.

Onetime Secret FAQ

Common questions about self-hosting Onetime Secret

How do I deploy Onetime Secret with Server Compass?

Simply download Server Compass, connect to your VPS, and select Onetime Secret from the templates list. Fill in the required configuration and click Deploy. The entire process takes under 3 minutes.

What are the system requirements for Onetime Secret?

Onetime Secret requires a minimum of 256MB RAM. We recommend a VPS with at least 1024MB RAM for optimal performance. Any modern Linux server with Docker support will work.

Can I migrate my existing Onetime Secret data?

Yes! Server Compass provides volume mapping that allows you to import existing data. You can also use standard Onetime Secret backup and restore procedures.

How do I update Onetime Secret to the latest version?

Server Compass makes updates easy. Simply click the Update button in your deployment dashboard, and the latest Onetime Secret image will be pulled and deployed with zero downtime.

Is Onetime Secret free to self-host?

Onetime Secret is open-source software. You only pay for your VPS hosting (typically $5-20/month) and optionally Server Compass ($29 one-time). No subscription fees or per-seat pricing.

Ready to Self-Host Onetime Secret?

Download Server Compass and deploy Onetime Secret to your VPS in under 3 minutes. No Docker expertise required.

Download Server Compass