Hoodik

Hoodik is an open-source, self-hosted web app and server that provides encrypted cloud storage. It allows users to store, manage, and share files through a web application where all encryption and decryption occur within the browser, ensuring the server never accesses plaintext data. This architecture ensures that the service provider or server administrator cannot read the stored content.

The software is deployed as a server and accessed via a web browser or an Android app. It is designed for users who require full control over their data and privacy through a lightweight installation, typically deployed using Docker containers across various CPU architectures including amd64 and arm64. Users can manage their own instances on a VPS or local hardware to maintain complete sovereignty over their files.

Key features

• End-to-end encryption using a hybrid RSA and AEGIS-128L scheme
• Secure search via tokenized and hashed metadata
• Encrypted markdown notes with a WYSIWYG editor
• Public sharing links that keep file keys hidden from the server
• Optional TOTP-based two-factor authentication
• Admin dashboard for managing users, sessions, and invitations
• Chunked file transfers for concurrent upload and download
• S3-compatible storage support for AWS, MinIO, and Backblaze B2
• Database support for both SQLite and PostgreSQL

The backend is built with Rust using the Actix-web framework, while the frontend utilizes Vue 3. To maintain privacy, the system uses RSA-2048 key pairs for each user, with the private key stored encrypted by the user's passphrase. The system supports multiple symmetric ciphers, including Ascon-128a and ChaCha20-Poly1305, and stores the cipher identifier with each file to ensure long-term decryptability. The architecture supports flexible storage options, allowing encrypted chunks to be saved on a local disk or an external S3-compatible service. It is intended for individuals and administrators who want a private file storage solution without relying on third-party providers.

Hoodik is a privacy-focused, lightweight storage server for users prioritizing end-to-end encryption and self-hosting.