# Gone > Gone shares a secret exactly once. It encrypts a password, token, key or file in the sender's browser (or the gone CLI), the server stores only ciphertext, the key travels in the link's #fragment, and the secret is deleted after one read. It is open source (AGPL-3.0), free, and self-hosted. - Public instance: https://app.getgone.dev (anyone can use it; for anything important, run your own) - Install the CLI on Linux or macOS: `curl -fsSL https://getgone.dev/install.sh | sh`, or with Homebrew: `brew install haukened/gone/gone` - Run your own: one static binary or container, SQLite storage, no external services, behind HTTPS (https://getgone.dev/docs/self-host/) - Source: https://github.com/haukened/gone - Every doc in one file: https://getgone.dev/llms-full.txt ## Use the CLI - [The gone CLI](https://getgone.dev/docs/cli/index.md): gone sends and opens one-time secrets from a terminal, and can ask someone for a secret or answer such a request. It speaks the same … - [CLI reference](https://getgone.dev/docs/cli-reference/index.md): Every gone command and flag, how it chooses a server, its exit codes and its JSON output. To install gone and send a first secret, start … ## Self-host - [Overview](https://getgone.dev/docs/self-host/index.md): Gone is one program, goned, that serves the web app and the API and keeps its data in a single directory. Running your own instance means … - [Docker Compose with Caddy](https://getgone.dev/docs/self-host/compose/index.md): deploy/compose.yaml runs Gone behind Caddy, which gets and renews a Let’s Encrypt certificate on its own. It is the quickest way to run Gone … - [Docker](https://getgone.dev/docs/self-host/docker/index.md): Gone ships as a multi-arch container image (linux/amd64, linux/arm64): ghcr.io/haukened/gone. - [Kubernetes](https://getgone.dev/docs/self-host/kubernetes/index.md): Gone has a Helm chart that runs it on Kubernetes, with Gateway API routing, one replica and its own storage. - [Linux packages](https://getgone.dev/docs/self-host/packages/index.md): Each release has a gone-server package for Debian, Ubuntu, Fedora and RHEL, for amd64 and arm64. It installs goned with a hardened systemd … - [Behind a reverse proxy](https://getgone.dev/docs/self-host/reverse-proxy/index.md): Any proxy that terminates TLS works: nginx, Traefik, HAProxy, Caddy, or a Cloudflare Tunnel. If you’re starting from scratch, Docker Compose … - [Require sign-in](https://getgone.dev/docs/sign-in/index.md): You can limit who creates secrets and requests on your instance to people your sign-in proxy has signed in. Opening a secret, replying to a … - [Branding](https://getgone.dev/docs/branding/index.md): You can show your own name, logo and accent colour on an unmodified copy of Gone, and link your contact, imprint and privacy pages from the … - [Metrics](https://getgone.dev/docs/metrics/index.md): Metrics are off unless both GONE_METRICS_ADDR and GONE_METRICS_TOKEN are set. An address without a token logs a warning and leaves metrics … - [Upgrade and maintain](https://getgone.dev/docs/operating/index.md): Keeping a Gone instance running: upgrading it, what it keeps on disk, why it needs no backups, and how to tell it’s healthy. To set one up, … ## Security - [Security model](https://getgone.dev/docs/security/index.md): Gone makes two promises: the server never sees a secret’s plaintext or key, and a link opens a secret at most once. - [Verify a release](https://getgone.dev/docs/verify/index.md): Every Gone release is built by this repository’s release workflow on GitHub Actions, from a version tag whose commit is already on main. The … - [Technical decisions](https://getgone.dev/docs/decisions/index.md): How Gone is built, and the alternatives we turned down: the choice, what we didn’t do, why, and what would make us look again. Features … - [Security policy](https://getgone.dev/docs/security-policy/index.md): Only the latest release is supported. Security fixes go into a new release, not into older ones, so update to the latest release before … ## Reference - [Configuration](https://getgone.dev/docs/configuration/index.md): The server, goned, is configured only through environment variables. There are no command-line flags and no config files. An invalid value … - [HTTP API](https://getgone.dev/docs/api/index.md): The HTTP API of the Gone one-time secret sharing service. The machine-readable OpenAPI specification is openapi.yaml; this page summarizes … - [Protocol specification](https://getgone.dev/docs/protocol/index.md): How Gone encrypts a secret, encodes it into a link, and exchanges it with the server, byte by byte, so any client can interoperate with any … ## FAQ - [Frequently asked questions](https://getgone.dev/docs/faq/index.md): Short answers about Gone, each linked to the page that explains it in full. ## The project - [Contributing](https://getgone.dev/docs/contributing/index.md): Thanks for helping. Gone is small on purpose, and its security depends on that, so this page explains how changes get in and what they need … - [Development](https://getgone.dev/docs/development/index.md): How to build, run and test Gone from source. The pull request process and coding rules are in Contributing. - [Roadmap](https://getgone.dev/docs/roadmap/index.md): Gone v3 adds abuse protection, a second factor for secrets, sender control, a command-line client, and a refreshed web interface. The core … - [Rejected features](https://getgone.dev/docs/rejected/index.md): Things people reasonably ask Gone for that we’ve decided not to build, and why. It exists so a request gets a clear answer instead of … - [Design system](https://getgone.dev/docs/design/index.md): One-time secret sharing behind frosted glass. Moonstone: calm, private, premium. - [Brand mark](https://getgone.dev/docs/brand/index.md): A heavy G whose right side erodes into particles. The solid letter is drawn on two exact circles; the erosion and particles come from the … - [Trademarks](https://getgone.dev/docs/trademarks/index.md): The name “Gone”, the Gone wordmark, and the Gone logo (the “Marks”) are trademarks of David Haukeness. ## About the project - [Why Gone](https://getgone.dev/why/): what Gone promises, what it is, and why it was made - [Security and trust](https://getgone.dev/trust/): what Gone protects, what it can't, and how to check both - [Choosing a secret-sharing tool](https://getgone.dev/choose/): how to check any tool's encryption and upkeep