TokenTimer Self-hosted
TokenTimer tracks expirations of any expiring asset (certificates, API keys, secrets, licenses) and notifies you before and after expiry. TokenTimer Self-hosted (tokentimer-core) is the edition that runs on your own infrastructure with Docker Compose or Kubernetes (Helm). It has no plan limits or integration quota restrictions, and because it runs inside your network it can monitor internal endpoints and private DNS names.
Version selector
These docs are versioned per tokentimer-core minor release. Use the version dropdown in the navbar to match your deployment.
Install and operate
- Install — Docker Compose or Helm, required environment variables, first login, upgrades.
- Configuration reference — every environment variable (SMTP, Twilio, workers, security).
- Authentication — sessions, 2FA, password policies.
- Monitoring & metrics — Prometheus metrics, ServiceMonitor, suggested alerts.
- Backup & restore — PostgreSQL backup procedures.
Use TokenTimer
- Tokens — the token model, file import, integrations, and endpoint monitoring.
- Alerts & thresholds — thresholds, delivery windows, channels, weekly digest.
- Contact groups & channels — workspace contacts, webhooks, WhatsApp templates.
- Teams, workspaces & RBAC — roles and workspace scoping.
- Audit — event catalog and troubleshooting.
Certificates (CertOps)
- Certificates and Certificate automation — the managed certificate inventory and machine tokens.
- Enable CertOps, connect an executor, and ACME with cert-manager.
Integrate
- API reference — session and machine-token authentication, endpoints, examples.
Looking for the hosted service instead? See the TokenTimer Cloud docs. For SSO (SAML/OIDC) and prebuilt registry images, see TokenTimer Enterprise.