Your files. Your keys.
Your server.
Hoodik is a lightweight, self-hosted cloud storage server built with Rust and Vue. Files are encrypted in your browser before they ever leave your machine — the server never sees your plaintext data.
docker run --name hoodik -d \
-e DATA_DIR='/data' \
-e APP_URL='https://my-app.example.com' \
--volume "$(pwd)/data:/data" \
-p 5443:5443 \
hudik/hoodik:latest
Why Hoodik?
Built for privacy-conscious self-hosters who want full control over their data.
End-to-End Encryption
RSA-2048AEGIS-128LHybrid RSA + AEGIS-128L encryption happens entirely in your browser via hardware-accelerated WASM. The server stores only ciphertext — your private key never leaves your device. Each file gets its own symmetric key, wrapped with your RSA public key.
Share With Other Accounts
ReaderEditorCo-ownerShare files and folders with other accounts on your server — end-to-end encrypted the whole way. Your browser re-encrypts each file key to the recipient's public key, so the server still only ever holds ciphertext. Assign a role per person, bundle frequent recipients into groups, and audit every grant and revoke in a signed, tamper-evident activity log.
Encrypted Markdown Notes
WYSIWYGVersion HistoryWrite markdown in a WYSIWYG editor right inside your vault. Notes auto-save as you type, every save keeps a version you can roll back to, and the content stays searchable — text is tokenized and hashed in your browser, so the server matches your searches without ever reading a word.
Secure Search
File names and note content are tokenized and hashed in the browser. The server matches opaque tokens — no plaintext is ever stored or transmitted.
Encrypted Previews
Browse photos, play videos, and preview HEIC shots without downloading. Thumbnails are generated and encrypted on your device, so even previews are ciphertext on the server.
Public Link Sharing
Share files via a link with the decryption key in the URL fragment. The server never sees the key — recipients decrypt locally in their browser.
Two-Factor Auth
Optional TOTP-based 2FA per user account. Add another layer of protection to your encrypted vault.
Admin Dashboard
Manage users, sessions, invitations, and app settings from a built-in admin panel. Full control of your instance.
Docker-First
Single container deployment with multi-arch images — amd64, armv6, armv7, arm64. Up and running in seconds.
S3-Compatible Storage
Store encrypted chunks on any S3-compatible service — AWS, Backblaze B2, Wasabi, MinIO. Scale to terabytes without growing your VPS disk.
Fast by Design
RustVue.jsChunked concurrent transfers, single-request tar bulk downloads, SQLite or PostgreSQL metadata. Idles at around 20 MB RAM.
Your server, in your pocket.
The Hoodik app connects to your self-hosted server with the same end-to-end encryption — powered by native Rust, not a web wrapper. Available now on iOS, Android, and macOS.
Ready to own your cloud?
Deploy the server with Docker in minutes, or grab the native app for iOS, Android, and macOS to reach your encrypted vault anywhere.
Free server: CC BY-NC 4.0 · Apple & Android: 30-day free trial