Re:Show HN: Flamehaven FileSearch – Self-Hosted RAG Semantic...
by Flamehaven on Wednesday November 19, 2025 @12:40AM
(#45976243)
We just released Flamehaven FileSearch v1.2.0, and this update focuses heavily on security, scalability, and multi-worker production deployments. The main change is that FileSearch is no longer a “public API”—it now includes a complete authentication and permissions system suitable for enterprise environments.
Key changes:
API Authentication & Authorization
All protected endpoints now require Bearer tokens. API keys support fine-grained permissions (upload/search/stores/delete), per-key rate limits, auditing, and SHA256 hashing (plain keys are never stored).
Admin Dashboard
A self-contained HTML/JS dashboard for managing API keys, inspecting request statistics, and viewing usage distribution. No external dependencies.
Batch Search API
Added a high-throughput endpoint that processes 1–100 queries in either sequential or parallel mode. Includes per-query isolation, priority ordering, and detailed timing metrics.
Redis Cache Backend
Optional distributed cache for multi-worker setups. Provides <10ms lookup latency, automatic fallback to local LRU, and ~40–60% reduction in LLM calls.
Deployment Support
Includes working examples for Docker, Docker Compose, and Kubernetes (ConfigMap, Secret, Deployment). Meant to be runnable out of the box.
If anyone has feedback on security design, API ergonomics, or deployment structure, I’d really appreciate it. We’re planning v1.2.1 (admin auth improvements, Redis UI) and v1.3.0 (key rotation + OAuth2/OIDC), so suggestions are welcome.
Key changes:
API Authentication & Authorization All protected endpoints now require Bearer tokens. API keys support fine-grained permissions (upload/search/stores/delete), per-key rate limits, auditing, and SHA256 hashing (plain keys are never stored).
Admin Dashboard A self-contained HTML/JS dashboard for managing API keys, inspecting request statistics, and viewing usage distribution. No external dependencies.
Batch Search API Added a high-throughput endpoint that processes 1–100 queries in either sequential or parallel mode. Includes per-query isolation, priority ordering, and detailed timing metrics.
Redis Cache Backend Optional distributed cache for multi-worker setups. Provides <10ms lookup latency, automatic fallback to local LRU, and ~40–60% reduction in LLM calls.
Deployment Support Includes working examples for Docker, Docker Compose, and Kubernetes (ConfigMap, Secret, Deployment). Meant to be runnable out of the box.
Performance highlights:
Cache hit: <10ms
Cache miss (LLM call): ~0.5–3s
Batch Search (10 queries): ~2–5s
GitHub: https://github.com/flamehaven01/Flamehaven-Filesearch
If anyone has feedback on security design, API ergonomics, or deployment structure, I’d really appreciate it. We’re planning v1.2.1 (admin auth improvements, Redis UI) and v1.3.0 (key rotation + OAuth2/OIDC), so suggestions are welcome.