SysAdmin
7d5f9cc246
Cross-platform privacy-hardening program. Two-layer product: - SilverLABS Application Stack (cross-platform spine) - Platform Hardening Profiles (per-OS, tier-honest) Platforms: Linux (Debian/Kicksecure), Android (Pixel/Samsung/Moto/generic), Windows (LTSC IoT), macOS (profile), iOS (MDM profile). Each flavour has both a preflashed hardware SKU path and a self-apply "harden your existing device" path. Includes umbrella docs (README + threat-model, design-principles, platform-matrix, roadmap, trust-model), per-platform and per-stack- component README stubs, .gitignore, LICENSE. Linux v1 ships first; Stack v1 = Browser + VPN + Sync. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
53 lines
2.1 KiB
Markdown
53 lines
2.1 KiB
Markdown
# SilverSync
|
|
|
|
**Status**: v1 (Linux MVP) — planning
|
|
|
|
A private replacement for iCloud / Google Drive / OneDrive. Contacts, calendar, files, photos, notes — synced across all your SilverMetal devices, encrypted client-side, zero-knowledge to the server.
|
|
|
|
## v1 scope
|
|
|
|
- **Contacts** — CardDAV
|
|
- **Calendar** — CalDAV
|
|
- **Files** — WebDAV with client-side encryption (E2EE)
|
|
- **Photos** — file-based, with client-side encryption
|
|
|
|
v1.1 adds Notes, Tasks.
|
|
|
|
## Server side
|
|
|
|
Lives in `SilverLABS/silver-sync-server` (separate repo). Stack:
|
|
- **Nextcloud** for files / photos (with E2EE app)
|
|
- **Radicale** or **Baïkal** for CardDAV / CalDAV
|
|
- Behind SilverVPN by default for transport-layer privacy
|
|
- Self-hostable — the same stack runs on a user's home server
|
|
|
|
## Client-side encryption
|
|
|
|
- Files: each file encrypted with a per-file content key; content keys wrapped with a user-derived master key (Argon2id from passphrase + account number)
|
|
- Server stores only ciphertext + opaque metadata
|
|
- Server cannot read filenames in their entirety (filename encryption mode in Nextcloud E2EE)
|
|
- Master key never leaves the device
|
|
|
|
## Per-platform clients
|
|
|
|
- **Linux**: GNOME / Plasma evolution, native CardDAV/CalDAV via existing tooling; Nextcloud client for files
|
|
- **Android**: DAVx⁵ (CardDAV/CalDAV) + Nextcloud Android client (rebranded)
|
|
- **Windows**: Nextcloud Windows client (rebranded) + Outlook integration
|
|
- **macOS**: Nextcloud macOS client (rebranded) + native Calendar/Contacts integration
|
|
- **iOS**: Nextcloud iOS app (rebranded) + iOS native CardDAV/CalDAV providers
|
|
|
|
## What this is not
|
|
|
|
- Not a "free Google replacement for everyone" — server costs are real, paid tier funds them
|
|
- Not a CDN — files sync between user's devices, not at internet scale
|
|
- Not a backup product — this is sync; backup is a separate concern (offer integration with restic/borg later)
|
|
|
|
## Migration
|
|
|
|
Documented procedures for users coming from:
|
|
- iCloud → SilverSync
|
|
- Google → SilverSync
|
|
- OneDrive → SilverSync
|
|
|
|
These guides are critical for onboarding and live in `docs/` of this directory once the client ships.
|