---
title: Self-host Relic: your own end-to-end encrypted clipboard sync
description: Run your own Relic sync server with one Docker command. Open source (AGPL), multi-arch, account-less, and zero-knowledge: it only ever holds ciphertext. Self-host a clipboard manager that syncs across your devices, or let Relic Cloud host it for you.
canonical: https://relic.space/self-host
source: https://relic.space/llms.txt
---
[Relic](https://relic.space/)OPEN SOURCE

[Sign in](https://relic.space/signin)[Get Relic free](https://relic.space/#download)

Open source · self-hostable

# Run your own Relic server.

Relic is local-first and end-to-end encrypted. Sync is the one part that touches a server, and that server is yours to run. Point the app at your own box, keep every byte on hardware you control, or let us host it for you. Same open code either way, and it only ever holds ciphertext.

[Get Relic free](https://relic.space/#download)[View the source](https://github.com/RelicSync/relic/tree/main/selfhost)

server · AGPL-3.0encryption · Apache-2.0amd64 + arm64

The in-app "Your own server" connect screen ships with the Relic client that's rolling out now. The server and its image are live today.

One command

## Up and running in a minute.

One container, one volume. Everything (the database and your encrypted blobs) lives in that volume, so it is the only thing to back up. No account, no config file, no external services.

`$ docker run -d -p 8787:8787 -v relic-data:/data ghcr.io/relicsync/relic-selfhost`

Multi-arch image: runs on a VPS, an old laptop, a Raspberry Pi or an ARM NAS.

[server/README](https://github.com/RelicSync/relic/tree/main/selfhost)

How it works

## Your box. Your data. Our code.

The self-host server is the same server behind Relic Cloud, running from local storage instead of ours. Account-less, zero-knowledge, and boring in all the right ways.

### No accounts. Just a passphrase.

The first device to connect claims the server with a passphrase. Every device after uses the same one. There is no email, no sign-up, no user table. Trust on first use, the way an SSH key works.

### It only ever holds ciphertext.

Your server runs the exact same encryption as Relic Cloud: XChaCha20-Poly1305 with an Argon2id-derived key that never leaves your device. The server stores sealed bytes and could not read them if it tried.

### No lock-in, either direction.

It is the same code we run in the cloud, so nothing about your vault is proprietary to one host. Move from your server to Relic Cloud, or the other way, whenever you want.

### Reach it from anywhere.

On your home network it just works. To reach it from outside, put it behind a tunnel like Tailscale or run it on a small VPS. No ports to poke in your router if you would rather not.

Verifiable, not just trustworthy

## Read the code that holds your key.

End-to-end encryption is only as good as the code you can check. Relic's client encryption is published as its own small, pure-Dart library. Read it, and run its test suite against pinned vectors to prove the sealed bytes match, byte for byte.

[relic\_crypto](https://github.com/RelicSync/relic/tree/main/crypto)[wire-format.md](https://github.com/RelicSync/relic/blob/main/docs/wire-format.md)

relic\_crypto

$ dart test

00:01 +0: seals to the same bytes as the app

00:01 +0: unwraps the master key

All tests passed.

### Run your own server

Free forever. One Docker command, your hardware, your data. The whole server is open source.

[Get the server](https://github.com/RelicSync/relic/tree/main/selfhost)

### Or let us host it

Relic Cloud is the same server, managed. Nothing to run or back up, and we still can't read a thing.

[See plans](https://relic.space/#pricing)

Local-first. End-to-end encrypted. On-device AI. Yours to host.

## Stop losing what you copy.

Works on all your devices · Only you can read it · Free to start

[Get Relic free](https://relic.space/#download)[Read the technology](https://relic.space/technology)

Windows, Mac, Linux, Android & iPhone · locked end-to-end