Open Source · Self-Hosted · End-to-End Encrypted

Your files. Your keys.
Your server.

Hoodik is a lightweight, self-hosted cloud storage server built with Rust and Vue. Files are encrypted in your browser before they ever leave your machine — the server never sees your plaintext data.

Get Started GitHub

View on GitHub

Quick Start

docker run --name hoodik -d \
  -e DATA_DIR='/data' \
  -e APP_URL='https://my-app.example.com' \
  --volume "$(pwd)/data:/data" \
  -p 5443:5443 \
  hudik/hoodik:latest

Hoodik - End-to-End Encrypted Cloud Storage

Why Hoodik?

Built for privacy-conscious self-hosters who want full control over their data.

🔐

End-to-End Encryption

RSA-2048AEGIS-128L

Hybrid RSA + AEGIS-128L encryption happens entirely in your browser via hardware-accelerated WASM. The server stores only ciphertext — your private key never leaves your device. Each file gets its own symmetric key, wrapped with your RSA public key.

🔎

Secure Search

File metadata is tokenized and hashed in the browser. The server matches opaque tokens — no plaintext names are ever stored or transmitted.

📝

Encrypted Notes with History

Write markdown notes in a WYSIWYG editor inside your encrypted vault. Auto-saved, encrypted with the same per-file keys as everything else, and every version is kept so you can roll back.

🔗

Public Link Sharing

Share files via a link with the decryption key in the URL fragment. The server never sees the key — recipients decrypt locally in their browser.

🛡️

Two-Factor Auth

Optional TOTP-based 2FA per user account. Add another layer of protection to your encrypted vault.

⚙️

Admin Dashboard

Manage users, sessions, invitations, and app settings from a built-in admin panel. Full control of your instance.

🐳

Docker-First

Single container deployment with multi-arch images — amd64, armv6, armv7, arm64. Up and running in seconds.

☁️

S3-Compatible Storage

Store encrypted chunks on any S3-compatible service — AWS, Backblaze B2, Wasabi, MinIO. Scale to terabytes without growing your VPS disk.

🚀

Fast by Design

RustVue.js

Chunked concurrent transfers, single-request tar bulk downloads, SQLite or PostgreSQL metadata. Idles at around 20 MB RAM.

Available on Android

Your server, in your pocket.

The Hoodik app connects to your self-hosted server with the same end-to-end encryption — powered by native Rust, not a web wrapper. Android is live on Google Play today; iOS and macOS are on the way.

Multi-server & multi-account

E2E encryption via Rust FFI

Biometric & PIN quick unlock

File preview — images, video, docs

Offline caching & background transfers

Shared links management

Verified against every server back to v1.7.0