Skip to content

Architecture Overview

How SilentSuite is structured and how the pieces fit together.

High-Level Architecture

SilentSuite is a privacy-focused productivity suite built on the Etebase protocol for end-to-end encrypted synchronization.

Client Devices                    Server
+------------------+         +------------------+
|  Web / Mobile    |         |  Caddy (HTTPS)   |
|                  |         +--------+---------+
|  Encrypt locally |                  |
|  using Etebase   |         +--------+---------+
|  protocol        | ------> |  Etebase Server  |
|                  |         |  (encrypted sync)|
|  Decrypt locally |         +--------+---------+
|                  |                  |
+------------------+         +--------+---------+
                             |  PostgreSQL      |
                             |  (stores blobs)  |
                             +------------------+

All encryption and decryption happens on the client. The server only ever sees ciphertext.

Monorepo Structure

The repository is a pnpm monorepo managed by Turborepo:

DirectoryPurpose
apps/landing/Marketing site and blog (Next.js, deployed to Cloudflare Workers)
apps/web/Main web application (Next.js)
apps/billing-api/Billing and subscription API
packages/Shared packages used across apps
self-host/Docker Compose configuration for self-hosting
deploy/Deployment scripts, init scripts, runbooks
docs/Documentation

Tech Stack

ComponentTechnology
FrontendNext.js 15, React, Tailwind CSS
ServerEtebase protocol (Python), Docker
DatabasePostgreSQL 16
Reverse ProxyCaddy (automatic TLS)
EncryptionXChaCha20-Poly1305, Argon2 (via Etebase)
Monorepopnpm workspaces, Turborepo
HostingHetzner Cloud (Germany), Cloudflare Workers

Key Design Principles

  1. Encryption is the architecture, not a feature. There is no unencrypted mode. Everything is E2EE by default.
  2. Open source by default. All code is open. The encryption can be audited.
  3. No lock-in. Standard Etebase protocol, not proprietary formats. Export anytime, self-host if you want.
  4. EU-hosted, EU-regulated. Servers in Germany. GDPR as a baseline.

Released under the AGPL-3.0 License.