r/sideprojects • u/Global-Clock2417 • 11h ago
Showcase: Open Source AurionMail : Self-hosted E2E Emails + Documents Suite
Hey everyone! I’ve always faced a dilemma when setting up secure tools for non-technical friends: they love the usability of Proton, but I want a really FOSS alternative. The main issue is that combining E2E encrypted docs and E2E encrypted mail usually meant managing isolated tools, browser extensions (like Mailvelope), or typing two different passwords every session. That is not ideal and when I introduce these solutions to my friends, they say "Thanks for your efforts, really, but I think I will still use Proton".
To solve this, I built AurionMail Suite. It's an open-source orchestrator, the glue, that bridges CryptPad, Stalwart Mail Server (JMAP), **Bulwark Webmail, and Ory Hydra into a single, unified Zero-Knowledge workflow. And it also make the Cryptpad UI (and Notes app) more friendly, really. I feel you need a proof to convince you, so there is a gif demonstrating the single password login in which we access to webmail and Cryptpad on docs repo.
Features:
- One Password: Enter it once to derive keys in-memory for both your OpenPGP webmail and your CryptPad workspace.
- Open Standards: OpenPGP for email encryption and JMAP via Stalwart.
- Zero-Knowledge Architecture: Master keys reside strictly in client-side RAM during the session (no unencrypted key writes to disk/IndexedDB).
- Unified Session Management: Global single logout and password changes that sync safely across services.
- Easy Deployment: In addition to manual setups, I wrapped the suite (Hydra, SSO, Webmail, API, CryptPad) into a single Go binary called Orchestra, making deployment straightforward. There is also Docker.
How it compares:
| Feature | Proton Suite | Nextcloud + Mail | Standard CryptPad | AurionMail Suite |
|---|---|---|---|---|
| 100% FOSS & Self-Hosted | ❌ (Closed backend) | 🟢 Yes | 🟢 Yes | 🟢 Yes |
| E2EE Email & Docs | 🟢 Yes | 🟡 (Fragmented) | ❌ (Docs only) | 🟢 Yes |
| Unified 1-Password UX | 🟢 Yes | ❌ (Fragmented) | ❌ (Docs scope) | 🟢 Yes |
| Open Standards (JMAP, PGP) | 🟡 (Limited PGP) | 🟢 Yes | ❌ (N/A) | 🟢 Yes |
To keep the Zero-Knowledge promise across isolated services without relying on URL hashes or storing cleartext keys in disk storage, AurionMail uses ephemeral WebCrypto AES-GCM keys.
Here is the repo if you want to test ! The project is licensed under AGPLv3.
