quietport

Quietport is an open-source, invite-only shared folder system designed for private file synchronization across Mac, Windows, and Linux platforms. It operates on a self-hosted model where a small Linux VM acts as the hub, ensuring that files are encrypted on the client side before transmission. The server stores only ciphertext and encrypted file names, meaning it never holds the decryption keys, which exist solely on member devices. The system leverages rclone's `crypt` backend for synchronization and uses a private WireGuard mesh (via Headscale and Tailscale) for secure device connectivity. Storage is handled by Garage, an S3-compatible object store. Sharing is managed through one-time invite links that expire after 24 hours, sealing the folder key under the link's code on the sender's device. This allows recipients to join a folder without creating accounts or using passwords. Key features include automatic client updates with signed releases, an operator CLI (`qpctl`) for management, and an append-only audit log. The architecture supports folder ownership, where owners can remove members and re-key folders to prevent removed devices from accessing new data. The project is MIT licensed and includes comprehensive documentation for deploying and operating the hub.