Kontorfix

Self-hosted registry for private software packages — with access control, multi-tenancy and a web interface. Publish packages centrally, assign them to individual customers, and give each customer an isolated view. Composer- and npm-compatible.

What it is

Kontorfix gathers private packages in one place and serves them under tight control — grouped into registries with their own address, secured by revocable access tokens. Teams publish centrally, assign packages to individual customers, and give each customer their own isolated view. Everything is manageable through a web interface and a complete programming interface. It runs self-hosted on your own infrastructure, shipped as a container.

Highlights

Registries with their own address — each registry under its own path or domain.
Fine-grained access control — revocable tokens and personal keys, separated into read and publish.
Multi-tenancy — customers get their own registries and an isolated portal.
Multiple sign-in options — password with two-factor, passkeys, and single sign-on.
Machine access — dedicated service accounts for automation and integrations.
Proxy & cache — public packages mirrored and kept locally.
REST API — a complete, versioned interface with interactive documentation (OpenAPI at /docs/api).
Notifications — outgoing event hooks for connected systems.
Live status view — operational state and activity at a glance (over WebSockets).
Flexible storage — local or object-based (S3-compatible), freely configurable.

Tech stack

Laravel 12 & PHP 8.2+ on the backend, Horizon (queues) and Reverb (WebSockets for the live status view)
Vue 3 & TypeScript, wired up through Inertia.js, styled with Tailwind CSS
Passkeys (WebAuthn), 2FA (TOTP), and JWT for tokens
Scramble for auto-generated OpenAPI documentation
Flysystem (S3-compatible) storage, composer/semver & metadata minifier for the Composer registry
Shipped as a container; DDEV for local development

For developers

git clone https://github.com/NoiXdev/kontorfix.git
cd kontorfix
ddev start
ddev composer install
ddev exec npm install
ddev exec php artisan key:generate
ddev exec php artisan migrate --seed
ddev exec npm run dev

Run the tests with ddev exec vendor/bin/pest and static analysis with ddev exec vendor/bin/phpstan analyse (Larastan). Deployment details live in the developer and operations documentation in the repo.

Status

Kontorfix is LIVE (v0.6.x) and under active development. Issues and PRs are welcome — github.com/NoiXdev/kontorfix.