Your cloud, your rules

Kubuno is a sovereign, open-source alternative to Google Workspace and Microsoft 365. A set of applications — office, drive, mail, calendar, maps, creative tools, AI and more — running on your server.

Install Kubuno

Try the demo

100 % self-hosted · No telemetry · AGPLv3 license

Why Kubuno

Your entire digital life, under your control

A small core — the platform's "operating system" — and a constellation of independent apps. Install only what you need; nothing is ever locked in.

Modular

Each app is an independent process that registers with the core at startup. Install and remove whatever you want.

Your data, at home

Self-hosted end to end. No third-party services, no telemetry: emails, documents and files stay on your server.

Secure by default

JWT with HttpOnly refresh tokens, Argon2id hashing, AES-256-GCM encryption, and a seccomp sandbox that prevents modules from executing processes.

Deployed in one command

A script installs Docker if needed, deploys the core, its modules and its database, generates the secrets — and sets up HTTPS if you supply a domain name.

The app suite

Twenty-three apps. One platform.

Grouped by purpose, all sharing the same shell, authentication and storage.

Productivity & office

Office

A complete suite — 9 editors: Documents, Spreadsheets, Presentations, Diagrams, Data (BI), Maths (LaTeX), Script, Whiteboard, Projects.

Drive

File storage, sharing, search and remote mounts.

Calendar

Calendars, events and CalDAV sync.

Tasks

Tasks, subtasks and Kanban boards, synced over CalDAV (VTODO).

Notes

Markdown notes with backlinks, a knowledge graph, reminders and sharing.

Contacts

A full address book: groups, vCard/CSV import, duplicate merging, CardDAV sync.

Forms

Forms, surveys and quizzes: conditional logic, public sharing, response statistics.

Communication

Mail

Email client (IMAP/SMTP) with a Bayesian spam filter.

Chat

Messaging, audio/video calls and meetings; end-to-end encryption is being finalised.

Forum

phpBB-style discussion forums: categories, moderation, ranks and per-forum permissions.

Creative & media

PaintSharp

A creative suite — 7 editors: Layer (raster), Apex (vector), Vertex (3D), Motion (video), Keyframe (2D animation), PdfWriter, FontEditor.

Photos

A smart photo gallery.

Media

Movie, series and music streaming: HLS transcoding, live TV, web radio, DJ console.

Books

A library for books, comics and eBooks, readable right in your browser.

Build & automate

Wiki

A collaborative wiki inspired by MediaWiki: wikitext, templates, categories, revision history.

App

A no-code app builder (Bubble-style): pages, data, workflows, one-click publishing.

Flow

Workflow automation (n8n-style): 25+ SaaS connectors, AI nodes and JavaScript code.

Code

A code editor in the browser.

Build

Computer-aided design: 2D/3D building and urban plans (Architect) and parametric 3D CAD (CAO3D).

Utilities & AI

Keestore

A password manager (KDBX format).

Maps

OpenStreetMap mapping: turn-by-turn navigation, GPX tracks, POIs, offline areas — and a 3D solar system.

Assistant

An AI assistant woven into the whole platform.

Browse the marketplace

Office

A complete office suite, in the browser

Documents, spreadsheets, presentations, diagrams, BI, LaTeX formulas, scripts, a whiteboard and projects — nine editors in one. Collaborate in real time without ever leaving your server.

Discover Office

Next-generation storage

An encrypted "My Cloud", spread across trusted peers

p2pnas pools the disk space of a network of people you know: your files are encrypted (AES-256-GCM), then scattered as redundant fragments (Reed-Solomon 10+4). The result: resilient personal storage — no datacenter, no subscription — that survives even when several peers are offline.

Discover P2P NAS

Creativity

A creative studio, from pixels to 3D

PaintSharp brings together seven editors: raster retouching, vector drawing, 3D modelling, video editing, 2D animation, PDF editing and font design. All your creative work, hosted at home.

Discover PaintSharp

Everywhere

Your files, synced and available offline

A Nextcloud-style sync engine written in Rust: bidirectional push/pull, an offline queue, conflict handling and a real-time mode. Available as a library, a CLI daemon, or a Tauri desktop app.

See the desktop client

Intelligence

An AI assistant at the heart of the platform

Assistant understands your data and acts across your apps: write, summarize, find, automate. Built-in AI, on your infrastructure.

Discover Assistant

Security is not optional

Strong encryption, strict isolation, and a sandbox that prevents modules from executing processes.

Robust authentication

Signed JWTs plus opaque refresh tokens, stored hashed and rotated on every use, in an HttpOnly cookie. Passwords hashed with Argon2id (OWASP parameters).

Two-factor authentication

TOTP (RFC 6238) with the secret encrypted at rest, single-use backup codes hashed with Argon2id, and 2FA enforceable for all administrators.

Step-up re-authentication

Critical actions — API tokens, account security — require proving presence again through a dedicated token that grants no API access of its own.

Encryption

AES-256-GCM for secrets at rest: TOTP, SMTP passwords, LDAP binds, remote-mount credentials. A full set of security headers (HSTS, CSP, X-Frame-Options…).

Execution lockdown

On Linux, the seccomp crate blocks <code>execve</code> in modules that do not need it: even a compromised dependency cannot run a command on the host.

Schema separation

Each app keeps its tables in its own PostgreSQL schema: clean boundaries, independent migrations and targeted backups.

Audit trail

Every administrative action is recorded — who, what, when, from where — in an allowlist-based journal: no secret can ever surface there, even by accident.

Sessions under control

Per-device revocation, configurable idle expiry, a password policy per organisational unit, and a security dashboard.

No information leaks

Public routes never distinguish “unknown email” from “wrong password” — a dummy hash is even verified to equalise response times.

Derived internal secret

Each module receives an HMAC-derived secret, verified in constant time: a compromised module cannot impersonate another.

No calls to Google

Interface fonts are served by your own instance, not a CDN: the HTML no longer contains any reference to <code>fonts.googleapis.com</code> or <code>fonts.gstatic.com</code>, not even a preconnect hint. Open your browser's Network tab — nothing goes to Google, and an instance cut off from the Internet renders identically.

Overload shield

Per-IP rate limiting, per-user budgets, a concurrency cap with load-shedding and slow-request cut-off — built into the server, tunable live.

Learn more about security

Architecture

One core, truly independent apps

Each app is its own process and its own repository. Apps never link against the core: they communicate over HTTP and shared events.

Explore the architecture

Take back your cloud.

A single command deploys the whole platform — an all-in-one Docker image, generated secrets, and HTTPS thrown in if you supply a domain name.

Install Kubuno

View on GitHub