RelicRELIC
Open source · self-hostable

Run your own Relic server.

Relic is local-first and end-to-end encrypted. Sync is the one part that touches a server, and that server is yours to run. Point the app at your own box, keep every byte on hardware you control, or let us host it for you. Same open code either way, and it only ever holds ciphertext.

server · AGPL-3.0encryption · Apache-2.0amd64 + arm64

The in-app "Your own server" connect screen ships with the Relic client that's rolling out now. The server and its image are live today.

One command

Up and running in a minute.

One container, one volume. Everything (the database and your encrypted blobs) lives in that volume, so it is the only thing to back up. No account, no config file, no external services.

$ docker run -d -p 8787:8787 -v relic-data:/data ghcr.io/relicsync/relic-selfhost
Multi-arch image: runs on a VPS, an old laptop, a Raspberry Pi or an ARM NAS.
server/README
How it works

Your box. Your data. Our code.

The self-host server is the same server behind Relic Cloud, running from local storage instead of ours. Account-less, zero-knowledge, and boring in all the right ways.

No accounts. Just a passphrase.

The first device to connect claims the server with a passphrase. Every device after uses the same one. There is no email, no sign-up, no user table. Trust on first use, the way an SSH key works.

It only ever holds ciphertext.

Your server runs the exact same encryption as Relic Cloud: XChaCha20-Poly1305 with an Argon2id-derived key that never leaves your device. The server stores sealed bytes and could not read them if it tried.

No lock-in, either direction.

It is the same code we run in the cloud, so nothing about your vault is proprietary to one host. Move from your server to Relic Cloud, or the other way, whenever you want.

Reach it from anywhere.

On your home network it just works. To reach it from outside, put it behind a tunnel like Tailscale or run it on a small VPS. No ports to poke in your router if you would rather not.

Verifiable, not just trustworthy

Read the code that holds your key.

End-to-end encryption is only as good as the code you can check. Relic's client encryption is published as its own small, pure-Dart library. Read it, and run its test suite against pinned vectors to prove the sealed bytes match, byte for byte.

relic-crypto
$ dart test
00:01 +0: seals to the same bytes as the app
00:01 +0: unwraps the master key
All tests passed.

Run your own server

Free forever. One Docker command, your hardware, your data. The whole server is open source.

Or let us host it

Relic Cloud is the same server, managed. Nothing to run or back up, and we still can't read a thing.

Local-first. End-to-end encrypted. On-device AI. Yours to host.
RelicRELIC

Stop losing what you copy.

Works on all your devicesOnly you can read itFree to start
Windows & Android today · Mac, iPhone & Linux soon · locked end-to-end