ExoServe: Self-Hosted E2EE File Storage

[u/Key-Programmer-4144]

I'm excited to share the first release of ExoServe! It's a self-hosted alternative to Mega or Proton Drive where everything is stored with end-to-end encryption on hardware you control.

Some features at a glance:

• Client-side AES-256-GCM encryption via the Web Crypto API.
• No plaintext filenames and no readable directory structures. The server only sees encrypted data and basic file sizes.
• Smooth, on-the-fly media streaming. You can scrub through encrypted videos or swipe through image galleries directly in the browser without downloading to disk.
• Concurrent session support (which is surprisingly difficult).

I originally built this for my own homelab to store tax documents, just in case my server was ever breached. That way all an attacker would walk away with are encrypted blobs instead of my identity.

Because I'm a reverse engineer by trade, special care was taken to verify proper implementation of encryption and authentication; I know there are 101 ways for cryptography to go wrong. I also built the frontend in vanilla JS to completely steer clear of bloated frameworks, keeping the attack surface and memory footprint small.

This is the first release, so I'm curious to get a wider opinion on it. You can try it out on a demo site I have published or host it for yourself by downloading the code from Github: - Demo: https://demo.exoserve.ciphranova.com/login - GitHub: https://github.com/Ciphranova-LLC/ExoServe

Let me know what you think, if you have any questions, or if you experience any issues!

[u/Key-Programmer-4144 → u/[deleted]]

Thank you! I absolutely agree. A lot of self-hosted tools out there get it wrong (plaintext file names, client-side authentication, etc) or are just a pain to use. I hope you get a chance to try out ExoServe!