🔐 PGP Keyserver

A simple, self-hosted OpenPGP keyserver built with Python (Flask) and GPG, running in Docker. Designed for local network use.

Requirements

• Docker Desktop

File Structure

pgp-keyserver/
├── app.py
├── Dockerfile
└── docker-compose.yml

Getting Started

docker compose up -d --build

The server runs on port 11371.

Usage

Kleopatra (GUI)

1. Open Settings → Configure Kleopatra → Directory Services
2. Click Add
3. Enter: hkp://localhost:11371 (or hkp://192.168.X.X:11371 for other devices on the network)
4. Click OK and Apply

GPG (terminal)

Send a key to the server:

gpg --keyserver hkp://localhost:11371 --send-keys YOUR_KEY_ID

Search for a key:

gpg --keyserver hkp://localhost:11371 --search-keys email@example.com

Receive a key:

gpg --keyserver hkp://localhost:11371 --recv-keys YOUR_KEY_ID

Browser

Search for a key:

http://localhost:11371/pks/lookup?op=index&search=email@example.com

Retrieve a key in ASCII format:

http://localhost:11371/pks/lookup?op=get&search=FINGERPRINT

Features

• ✅ Upload public keys
• ✅ Duplicate prevention (checked by fingerprint)
• ✅ Search by email (partial and full)
• ✅ Search by key ID and fingerprint
• ✅ Revocation certificate support
• ✅ Compatible with Kleopatra and GPG
• ✅ Persistent storage via Docker volume

Local Network Usage

Find your IP address:

ipconfig

Other devices on the network can use the server by adding the following in Kleopatra:

hkp://192.168.X.X:11371

Management

Stop the server:

docker compose down

View logs:

docker logs pgp-keyserver

Remove the server and all data:

docker compose down -v

Notes

• The server starts automatically after a system reboot (requires Docker Desktop to be running)
• Key data is stored in the Docker volume pgp-keyserver_keydata
• This server is not intended for public internet use — no TLS or rate limiting