Hoodik

Screenshot

About Hoodik

Hoodik is a lightweight, self-hosted, end-to-end encrypted cloud storage server built with Rust (Actix-web) on the backend and Vue 3 on the frontend. All encryption and decryption happens in the browser using a hybrid RSA-2048 and AEGIS-128L scheme — the server never sees plaintext data or file names. Each user gets an RSA key pair on registration, and files are encrypted chunk-by-chunk before upload. Searchable metadata is tokenized and hashed so the server can match queries without ever storing plaintext. Hoodik also supports encrypted markdown notes with a WYSIWYG editor, public sharing links where the file key never reaches the server, and optional TOTP two-factor authentication. Storage backends include local disk or any S3-compatible service such as AWS, MinIO, Backblaze B2, or Wasabi. The database can be SQLite out of the box or PostgreSQL via a single environment variable. Hoodik is deployed as a single Docker container with multi-arch images for amd64, armv6, armv7, and arm64, and an Android app is also available.

Key Features

• End-to-end encryption with RSA-2048 and AEGIS-128L in the browser
• Server never sees plaintext files, names, or metadata
• Secure search via tokenized and hashed metadata
• Encrypted markdown notes with WYSIWYG editor
• Public sharing links with client-side key decryption
• Optional TOTP two-factor authentication
• Chunked concurrent upload and download
• SQLite out of the box or PostgreSQL via environment variable
• S3-compatible storage support (AWS, MinIO, Backblaze B2, Wasabi)
• Local storage to S3 migration tool
• Single Docker container deployment
• Multi-arch images for amd64, armv6, armv7, and arm64
• Android app available on Google Play
• Admin dashboard for user, session, and invitation management
• Built with Rust (Actix-web) and Vue 3

Useful Links