hudikhq/hoodik

What is it?

Key features

• 01Files are encrypted in the browser with AEGIS-128L before upload.
• 02Login uses OPAQUE so the password never reaches the server.
• 03Encrypted notes with a WYSIWYG markdown editor and auto-save.
• 04Searchable encrypted metadata without server-side plaintext.
• 05Public share links with keys kept in the URL fragment.
• 06Optional TOTP two-factor authentication and an admin dashboard.
• 07Storage on local disk or any S3-compatible service, with SQLite or PostgreSQL.

Use cases

• Running a private, end-to-end encrypted file drive on your own server or NAS.
• Storing encrypted backups in an S3-compatible bucket such as MinIO or Backblaze B2.
• Sharing files with others through links that the server cannot decrypt.
• Keeping encrypted personal notes that stay searchable on your own instance.

Quick start

1. 1

   Run the Docker container with your data directory and app URL

   docker run --name hoodik -d \ -e DATA_DIR='/data' \ -e APP_URL='https://my-app.example.com' \ --volume "$(pwd)/data:/data" \ -p 5443:5443 \ hudik/hoodik:latest
2. 2

   Open the server in your browser at port 5443 and accept the self-signed certificate

Things to know

• !The README's license badge says CC BY-NC 4.0, which is non-commercial, so commercial use is restricted.
• !Self-hosting needs TLS setup and careful configuration, such as setting JWT_SECRET to keep sessions across restarts.
• !Losing your private key means losing access to your encrypted files, so you must store it safely.

Topics

FAQ

What is hoodik?

Self-hosted cloud storage server where files and notes are encrypted in the browser before they reach the server. Hoodik is a self-hosted cloud storage server built with Rust (Actix-web) on the backend and Vue 3 on the frontend. Files are encrypted in the browser with AEGIS-128L before upload and decrypted after download, so the server only stores ciphertext. File keys are wrapped with a hybrid X25519 and ML-KEM-768 scheme, and login uses OPAQUE so the password never leaves the device.

Is hoodik free to use? What license does it have?

hoodik is open source under the Other license. Check the license terms before using it in commercial products.

Is hoodik still maintained?

Actively maintained. The last commit to hoodik was on Oct 19, 2026.

What can I use hoodik for?

Running a private, end-to-end encrypted file drive on your own server or NAS. Storing encrypted backups in an S3-compatible bucket such as MinIO or Backblaze B2. Sharing files with others through links that the server cannot decrypt. Keeping encrypted personal notes that stay searchable on your own instance.

How do I install hoodik?

Run the Docker container with your data directory and app URL: docker run --name hoodik -d \ -e DATA_DIR='/data' \ -e APP_URL='https://my-app.example.com' \ --volume "$(pwd)/data:/data" \ -p 5443:5443 \ hudik/hoodik:latest Open the server in your browser at port 5443 and accept the self-signed certificate

Where can I get hoodik?

The source code and installation instructions are on GitHub: https://github.com/hudikhq/hoodik