I built an open-source self-hosted file vault that uses client-side end-to-end encryption (WebCrypto AES-GCM). The backend is designed around a simple form of moving-target defense: the container stack rotates periodically to reduce static attack surface and persistence opportunities.

It’s still early, but I would love feedback on the architecture, threat model, and E2EE approach.

Website: https://leyzen.com Code: https://github.com/3xpyth0n/leyzen-vault