Deploy Now

Stars

92

Forks

26

Watchers

1

Developer links

SilentSuite

SilentSuite is an end-to-end encrypted sync service for your calendar, contacts, and tasks, where the server stores only ciphertext and cannot read a single event, name, or plan. Encryption happens on your devices with keys derived locally, so record contents are sealed before upload and opened only on another trusted device of yours. Manage everything in the web app, sync a phone through the Android adapter's system calendar, contacts, and task providers, or connect desktop apps like Thunderbird and GNOME Calendar through the local Bridge. The Bridge speaks CalDAV and CardDAV only on localhost, then forwards encrypted records upstream, so standard desktop clients work without ever exposing plaintext to the server. Import and export keep exit paths open, and because sync rides the open Etebase protocol, your data model stays inspectable rather than locked into a proprietary format. Self-hosting unlocks every feature at no cost: one Compose file starts the sync server and PostgreSQL, with open registration you can close after your own account exists, nightly backup tooling, and Umbrel packaging. Signing up hosted users is not required at all; the same web app, Android adapter, and Bridge run against your own server with your domain. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

SilentSuite
SilentSuite
SilentSuite
SilentSuite
SilentSuite

Benefits

  • The Server Cannot Read Anything
  • Calendars expose where you will be, contacts map your relationships, and tasks reveal your plans, so SilentSuite encrypts all three on your device first. The server stores ciphertext and never receives the keys.
  • Desktop Apps Through The Bridge
  • The Bridge exposes CalDAV and CardDAV on localhost only, so Thunderbird, Evolution, GNOME Calendar, and Apple Calendar keep working with plaintext locally and encrypted records upstream. No vendor-specific desktop client is required.
  • Every Feature Unlocked Self-Hosted
  • Self-hosting is not a stripped community edition: every feature is unlocked, registration can be closed after the first account, and backup, verify, and update scripts ship in the same self-host folder.
  • Phones Sync Natively
  • The Android adapter syncs through Android's own calendar, contacts, and task providers, so your existing apps keep their data without import rituals. It installs from Google Play, F-Droid, Obtainium, or a signed APK.

Features

  • Etebase Zero-Knowledge Sync
  • Records are encrypted and decrypted only on trusted devices using the open Etebase protocol with XChaCha20-Poly1305, Argon2id key derivation, and libsodium, and the server stores encrypted blobs.
  • Web App Included
  • The web client manages calendars, contacts, and tasks, with experimental Markdown notes, against the hosted service or your own server, with import and export for moving data in and out.
  • Registration You Control
  • Open signups can be closed with one environment setting, a one-time bootstrap token can gate the first admin account, and a Django superuser handles accounts from the admin side.
  • Scripted Backups And Updates
  • The self-host folder ships backup, verification, and update scripts plus a signed-release installer that pins the exact server image digest, so upgrades run the bytes the release was built from.

Apps Similar to SilentSuite