OzyBase

# OzyBase Core 🛡️🚀

The high-performance, open-source Backend-as-a-Service (BaaS) for the next generation of apps.

⚡ PocketBase Simplicity, Supabase Power

OzyBase is a high-performance, single-binary BaaS for authentication, dynamic collections, realtime subscriptions, and file storage with zero-friction deployment.

✅ Production Hardening Status (2026-02-20)

• JWT subject validated against _v_users on authenticated requests.
• Role/email sourced from DB (not only JWT claims).
• Tokens signed with non-existent user are rejected (401).
• API keys remain valid for protected routes.
• URL query token sanitization active in frontend flows.
• Security headers and CSRF secure cookie enabled.
• Docker compose requires critical env vars and includes health checks.
• Rate limiter tuning exposed via env (RATE_LIMIT_RPS, RATE_LIMIT_BURST).

🚀 Quick Start

Install (latest release)

curl -fsSL https://raw.githubusercontent.com/Xangel0s/OzyBase/main/scripts/install.sh | bash

irm https://raw.githubusercontent.com/Xangel0s/OzyBase/main/scripts/install.ps1 | iex

Local

git clone https://github.com/Xangel0s/OzyBase.git
cd OzyBase-Core
go run ./cmd/OzyBase

Docker

docker compose up -d --build

CLI utility commands

ozybase version
ozybase upgrade
ozybase functions init hello

🔐 Required Environment Variables

PORT=8090
SITE_URL=https://api.example.com
APP_DOMAIN=example.com
ALLOWED_ORIGINS=https://app.example.com,https://api.example.com
JWT_SECRET=<64-byte-random-secret>
DB_USER=ozyuser
DB_PASSWORD=<strong-password>
DB_NAME=Ozydb
DB_SSLMODE=verify-full
RATE_LIMIT_RPS=20
RATE_LIMIT_BURST=20
DEBUG=false

📚 Documentation

• Deployment Runbook: docs/DEPLOYMENT.md
• Security Suite: docs/SECURITY_SUITE.md
• Security Notifications: docs/SECURITY_NOTIFICATIONS.md
• Project Status: docs/PROJECT_STATUS_MASTER.md
• Roadmap: docs/ROADMAP.md
• Changelog: CHANGELOG.md

Developed by Xangel0s.