Skip to content

Architecture Overview

How SilentSuite is structured and how the pieces fit together.

High-Level Architecture

SilentSuite is a privacy-focused productivity suite built on the Etebase protocol for end-to-end encrypted synchronization.

Client Devices                    Server
+------------------+         +------------------+
|  Web / Mobile    |         | Reverse Proxy    |
|                  |         |     (HTTPS)      |
|  Encrypt locally |         +--------+---------+
|  using Etebase   |                  |
|  protocol        |         +--------+---------+
|                  | ------> |  Etebase Server  |
|  Decrypt locally |         |  (encrypted sync)|
|                  |         +--------+---------+
+------------------+                  |
                             +--------+---------+
                             |  PostgreSQL      |
                             |  (stores blobs)  |
                             +------------------+

All encryption and decryption happens on the client. The server only ever sees ciphertext.

Monorepo Structure

The repository is a pnpm monorepo managed by Turborepo:

DirectoryPurpose
apps/web/Main web application (Next.js)
packages/Shared packages used across apps
self-host/Docker Compose configuration for self-hosting
deploy/Deployment scripts, init scripts, runbooks
apps/docs/Documentation
android/Android sync adapter (Kotlin)
bridge/CalDAV/CardDAV bridge daemon (Python)

Tech Stack

ComponentTechnology
FrontendNext.js 16, React, Tailwind CSS
ServerEtebase protocol (Django 5.2), Docker
Billing APIFastify, Stripe
BridgePython (CalDAV/CardDAV to Etebase translation)
DatabasePostgreSQL 16
Reverse Proxynginx, Caddy, Traefik, or similar (TLS termination)
EncryptionXChaCha20-Poly1305, Argon2 (via Etebase)
Monorepopnpm workspaces, Turborepo
HostingEU cloud infrastructure, Cloudflare Workers

Key Design Principles

  1. Encryption is the architecture, not a feature. There is no unencrypted mode. Everything is E2EE by default.
  2. Open source by default. All code is open. The encryption can be audited.
  3. No lock-in. Standard Etebase protocol, not proprietary formats. Export anytime, self-host if you want.
  4. EU-hosted, GDPR-compliant. Your encrypted data stays in the EU. GDPR as a baseline.

Released under the AGPL-3.0 License.