Aptify is a self-hosted APT repository manager with a clean web UI. Host, sign, and serve your own .deb packages without any external infrastructure.
- Web Dashboard — Manage repositories and packages from a modern browser UI.
- Automated Indexing — Generates
Packages,Release, andInReleasefiles automatically with GPG signatures on every upload. - Secure by Default — Timing-safe authentication, strict path traversal protection, upload size limits, and GPG key export without token leakage via URL parameters.
- Single Binary — The entire backend and frontend ship as one self-contained Go binary.
- Flexible Storage — SQLite out of the box; MySQL supported for larger deployments.
Requirements: Docker and Docker Compose.
- Clone the repository.
- Create a
.envfile:ADMIN_USERNAME=admin ADMIN_PASSWORD=mysecurepassword JWT_SECRET=your_super_secret_string KEY_NAME="My APT Repo" KEY_EMAIL="apt@mycompany.com"
- Start the server:
docker-compose up -d
- Open
http://localhost:8080in your browser.
Aptify provides a robust command-line client (aptify-cli) for easily pushing packages from your local machine or automating uploads in your CI/CD pipelines.
Install it in one line (macOS, Linux, and Windows via Git Bash):
curl -fsSL https://raw.githubusercontent.com/kernelcode0/aptify/main/install.sh | bashUsage Examples:
# 1. Login locally (creates and saves an API key to ~/.config/aptify/config.json)
aptify-cli login http://localhost:8080
# 2. Push a package to your repository
aptify-cli push my-repo package_1.0.0_amd64.deb
# 3. Use it in a CI/CD script without logging in
aptify-cli push --server http://localhost:8080 --token YOUR_API_KEY my-repo *.debAptify defaults to SQLite — no configuration needed. For larger deployments, switch to MySQL:
DB_TYPE=mysql
DB_DSN=user:password@tcp(127.0.0.1:3306)/aptify?parseTime=trueA commented-out MySQL service example is included in docker-compose.yml.
Requires Go 1.25+ and Node.js 20+.
# Build the frontend
cd web && npm run build
# Run the backend
go run ./cmd/serverOr use the Makefile targets:
make dev-backend # runs the Go server with live reload
make dev-ui # runs the Vite dev serverIf you find this software useful and it saves you time or money, consider supporting its development!
Your support directly funds:
- Server hosting and domain costs to keep the demo/project alive
- Late-night coding sessions and ongoing maintenance
- Keeping Aptify 100% free and open-source forever!
Authentication is backed by JWTs. Package filenames and upload paths are strictly validated. All file uploads are protected against DoS via size limits. The GPG signing key is exported through an authenticated API endpoint, never via URL parameters.
For inquiries, support, or security reports, please contact: aptify@kernelcode.de
