Open-source, self-hosted tools for communities.
- The r-Stack is a suite of open-source, - interoperable applications you can run on your own server. No vendor lock-in, no - platform fees, no terms of service that change overnight. Unified by - EncryptID passkey auth, every tool shares the same sync layer - so your community's data flows freely between apps — and stays yours. + Open Source · Self-Hosted · Community-Owned +
+ A complete suite of open-source tools for community self-governance — + tied together with zero-knowledge identity and data sovereignty to the user.
+ rStack combines the latest open-source tools into a cohesive platform that communities + can self-host on their own infrastructure or run on shared community servers. One login, + one data layer, twenty apps — no vendor lock-in, no surveillance, no kill switch. +
Each tool is independent but stronger together. Log in once, use them all.
Every app is source-available. Read the code, fork it, audit it, contribute back. No black boxes.
Run on your server, a community VPS, or a Raspberry Pi. Your hardware, your rules, your data.
Passkey-based auth with on-device key derivation. The server never sees your private material.
End-to-end encrypted. CRDT-synced. Your community's data stays yours — by architecture, not policy.
- Every r-Stack app ships as a Docker container. Clone the repo, run - docker compose up, and the whole suite is live on - your hardware — a VPS, a home server, or a Raspberry Pi. + rStack isn't a monolith. It's four independent layers that compose into + something greater than the sum of their parts. Each layer can be swapped, + extended, or self-hosted independently.
- $ git clone https://git.rstack.online/rstack - $ cd rstack - $ cp .env.example .env # set your domain + secrets - $ docker compose up -d # that's it - - ✓ rSpace → space.yourdomain.org - ✓ rNotes → notes.yourdomain.org - ✓ rVote → vote.yourdomain.org - ✓ rFunds → funds.yourdomain.org - ✓ rFiles → files.yourdomain.org - ✓ rMaps → maps.yourdomain.org - ✓ EncryptID → id.yourdomain.org - ...and every other app in the suite -
- No SaaS subscription, no per-seat pricing, no usage caps. Run the - entire stack for your 5-person co-op or your 500-person organization - on a single $10/month VPS. Scale by adding hardware, not by upgrading - a pricing tier. -
Each app handles one job well — notes, voting, budgets, maps, chat. They share data through the sync layer below, so a vote in rVote can reference a budget in rFunds without either app knowing the other's internals.
- Your community's files, notes, votes, and financial records live on - disk you control. No third-party cloud provider can read, mine, or - accidentally leak your data. Backups are just files you copy. -
Conflict-free replicated data types keep every app in sync — peer-to-peer, offline-capable, and eventually consistent. No central database, no single point of failure. Byzantine fault tolerant token ledger included.
- Every app is open source. Need a custom voting algorithm? A different - map tile provider? A branded theme for your community? Fork the repo, - change what you need, and deploy. No permission required. -
One biometric prompt creates your identity, derives encryption/signing/DID keys on-device, and provisions a gasless smart wallet. Social recovery replaces seed phrases. One login for every app.
- SaaS tools disappear when the company pivots or shuts down. Self-hosted - open-source tools keep running as long as you want them to. Your community's - infrastructure doesn't depend on anyone else's business model. -
Every app ships as an optimized Docker container. Traefik handles routing and TLS automatically. Deploy the full stack with a single docker compose up on any Linux server.
docker compose up
- A single identity layer that turns a fingerprint or face scan into - full-stack access — encrypted storage, signed votes, community - treasury, and more — without passwords, seed phrases, or cloud accounts. + Twenty apps organized into seven functional areas. Each area solves a core challenge + of community coordination. Use the apps you need — they work independently + or as an integrated suite. +
The creative workspace. Infinite canvases for spatial thinking, real-time documents for group writing, and a publishing pipeline that turns drafts into print-ready books.
Spatial and temporal coordination for groups. Schedule events across time zones, plan trips collaboratively, and map your community's presence across the world.
Real-time and asynchronous communication channels. Encrypted chat for immediate coordination, shared inboxes for email workflows, and forums for long-form discourse.
Democratic decision-making tools for any group. From lightweight polls to weighted conviction voting, with cryptographically signed ballots that are verifiable but private.
Community economics without crypto literacy. Pool resources, track budgets, run auctions, and manage treasuries — all through the same biometric login, with smart wallets handling the complexity underneath.
Media, identity, and relationships. Store and share files with end-to-end encryption, host video without algorithms, map your community's social graph, and even print merch on demand.
Privacy-respecting analytics that your community controls. No third-party trackers, no data brokers, no surveillance capitalism.
+ A single identity layer that turns a fingerprint or face scan into full-stack + access — encrypted storage, signed votes, community treasury, and more — + without passwords, seed phrases, or cloud accounts.
- EncryptID is built on WebAuthn passkeys — the same - standard behind Face ID and fingerprint unlock on your phone. Your identity is - bound to your device's secure hardware (TPM or Secure Enclave), so there is - nothing to type, nothing to remember, and nothing that can be phished. Registration - and login are a single biometric prompt. + Built on WebAuthn passkeys — the same standard + behind Face ID and fingerprint unlock. Your identity is bound to your device's + secure hardware (TPM / Secure Enclave). Nothing to type, nothing to remember, + nothing that can be phished.
- When you authenticate, EncryptID derives a full set of cryptographic keys - entirely on your device using HKDF. These keys - never leave your hardware. Your encryption key protects your files, your signing - key validates your votes, and your DID key proves your identity — all - without a central server ever seeing your private material. Data syncs - peer-to-peer via CRDTs; the server is just a relay, not an authority. + Authentication derives a full set of cryptographic keys entirely on your device + using HKDF. Encryption keys for files, signing keys for votes, DID keys for portable + identity — all generated locally. The server is a relay, never an authority.
- Lost your phone? No problem — and no seed phrase to dig out of a drawer. - EncryptID uses guardian-based recovery: you designate - trusted people (friends, family, community leaders) as guardians. If you lose - access, any 3 of your 5 guardians can approve recovery after a 48-hour - time-lock — giving you time to cancel if something seems wrong. Guardians - never see each other's identities or your private keys. + Lost your phone? Designate trusted guardians (friends, family, community leaders). + Any 3 of 5 guardians can approve recovery after a 48-hour time-lock. No seed phrases, + no email resets. Guardians never see each other's identities or your private keys.
- EncryptID integrates Account Abstraction (ERC-4337) - smart wallets, which means every user gets an on-chain wallet — without - ever seeing a wallet address, gas fee, or blockchain confirmation. Your passkey - is your wallet signer. A paymaster sponsors - transaction fees so users never need to hold ETH. Session keys allow daily - operations (voting, micro-payments, content uploads) with a single biometric - prompt per session rather than per action. Spending limits and time-locks - protect community treasuries. + Every user gets an ERC-4337 smart wallet — without + ever seeing a wallet address or gas fee. Your passkey is your wallet signer. + A paymaster sponsors fees. Session keys allow daily operations with a single biometric + prompt per session.
- Most blockchain tools assume users already know what a wallet is. - EncryptID removes that assumption entirely. Here's what becomes possible - when identity, encryption, and treasury are invisible infrastructure - rather than technical prerequisites. + Any r-Stack app can issue tokens through the shared CRDT data layer — + no smart contract deployment, no gas fees, no blockchain expertise required. + Bridge to on-chain when you're ready.
- A neighbourhood association can pool funds, vote on how to spend them, - and track every transaction on an immutable ledger — all through - the same fingerprint login they use to unlock their phone. No one needs - to understand gas, private keys, or blockchain explorers. The wallet is - there, it's auditable, and it's invisible. + Tokens are built on Byzantine Fault Tolerant CRDTs — + the same conflict-free data structures that power real-time sync across every app. + They replicate peer-to-peer, resolve conflicts automatically, and maintain a + consistent ledger without a central mint. When ready, the CRDT ledger can bridge + to an ERC-20 on any EVM chain through the Account Abstraction wallet.
- Co-ops, DAOs, strata councils, mutual aid networks — any group - that votes can use rVote with cryptographically - signed ballots that are verifiable but private. Because the signing key is - derived from a passkey, members don't need to manage keys or install - extensions. They just vote. + Gate access to private canvases, files, or voting channels. Revoke by removing + the token. Permissions propagate in real-time through the CRDT mesh.
- Files shared in rFiles, notes in - rNotes, and canvases in - rSpace are end-to-end encrypted with keys - that only the community members hold. There's no admin backdoor, no - platform that can read your data, and no breach that exposes plaintext. - Privacy isn't a setting — it's the architecture. + Reward participation: meetings attended, tasks completed, content contributed. + Credits accumulate and can be redeemed for governance weight, budget allocation, + or marketplace purchases.
- Your EncryptID is a DID (Decentralized Identifier) - that you own. Join a new community, and your reputation, credentials, and - relationships can follow you — without creating a new account or - trusting a new platform with your data. Leave a community, and your - identity stays yours. + Distribute project tokens to supporters. Track contributions transparently through + rFunds and vote on allocation through rVote. Full history auditable by token holders.
- Paymaster-sponsored transactions mean a community can run a group - purchase in rCart, split expenses in - rFunds, or fund a project through - rWallet without any member paying gas fees. - The smart wallet batches operations, so what would be ten separate - transactions becomes one seamless action. -
- Because every app is open source and - self-hosted, communities aren't tenants on - someone else's platform. Fork the code, run it on your own hardware, - audit every line. The r-Stack is infrastructure that communities - own, not services they rent. + Start with zero-friction off-chain CRDT tokens. When you need DeFi composability + or cross-community exchange, bridge to ERC-20 with a single action through + the smart wallet.
+ rStack doesn't reinvent wheels. Every app is assembled from battle-tested + open-source projects — the latest and greatest tools, composed into + a cohesive platform. +
Infinite canvas engine powering rSpace. Real-time multiplayer drawing, diagramming, and spatial thinking.
Conflict-free replicated data types for real-time sync. Peer-to-peer, offline-capable, eventually consistent.
W3C standard for passwordless authentication. Hardware-backed passkeys via TPM and Secure Enclave.
The leading open-source discussion platform. Trust levels, moderation, and rich threading for rForum.
Open-source mapping with OpenStreetMap tiles. Powers rMaps, rCal's spatial view, and rTrips route planning.
Decentralized, end-to-end encrypted messaging standard. Interoperable federation for rChats.
Modern typesetting system that's fast, ergonomic, and beautiful. Powers rPubs' document pipeline.
Federated video hosting with ActivityPub. No algorithms, no ads, no surveillance. Powers rTube.
Privacy-friendly analytics. No cookies, GDPR compliant, lightweight. Powers rData.
Account Abstraction standard for smart wallets. Gasless transactions, session keys, and social recovery.
Container orchestration with automatic service discovery and TLS. The deployment backbone of every app.
Edge-first web frameworks. Fast, lightweight, and deployable anywhere — from Cloudflare Workers to Docker.
+ Every r-Stack app ships as a Docker container. Clone, configure, deploy. + The whole suite runs on a VPS, a home server, or community-shared infrastructure. +
+ $ git clone https://git.rstack.online/rstack + $ cd rstack + $ cp .env.example .env # set your domain + secrets + $ docker compose up -d # that's it + + ✓ rSpace → space.yourdomain.org + ✓ rNotes → notes.yourdomain.org + ✓ rVote → vote.yourdomain.org + ✓ rFunds → funds.yourdomain.org + ✓ rFiles → files.yourdomain.org + ✓ rMaps → maps.yourdomain.org + ✓ EncryptID → id.yourdomain.org + ...and every other app in the suite +
+ No SaaS subscription, no per-seat pricing, no usage caps. Run the entire stack + for your 5-person co-op or your 500-person organization on a single $10/month VPS. + Scale by adding hardware, not upgrading a pricing tier. +
+ Don't want to manage a server? Join a community-hosted instance. Multiple + organizations can share infrastructure costs while maintaining isolated, + encrypted data spaces. Federate across instances when you're ready. +
+ Need a custom voting algorithm? A different map provider? A branded theme? + Fork the repo, change what you need, deploy. Every app is designed to be + modified. No permission required. +
+ SaaS tools disappear when the company pivots or shuts down. Self-hosted + open-source tools keep running as long as you want them to. Your community's + infrastructure doesn't depend on anyone else's business model. +
+ Explore each app independently or see how they work together as a suite. + Every app is live and ready to try. +
Jump into rSpace and start collaborating on an infinite, real-time canvas
Create a poll in rVote and see cryptographic ballot signing in action
Drop a document into rPubs and generate a print-ready PDF in seconds
Explore rCal's spatiotemporal calendar with ten zoom levels
Pin locations and draw regions on a collaborative open-source map
Register with a passkey and see zero-knowledge identity in action
- Any r-Stack app can issue tokens to community members through the shared - CRDT data layer — no smart contract deployment, no gas fees, no - blockchain expertise required. -
- r-Stack tokens are built on Byzantine Fault Tolerant CRDTs - — the same conflict-free data structures that power real-time sync across - every app. Tokens are first-class objects in the shared data layer: they replicate - peer-to-peer, resolve conflicts automatically, and maintain a consistent ledger - across all participants without a central mint or blockchain validator. When your - community is ready to bridge to an on-chain asset, the CRDT ledger provides a - cryptographically verifiable history that can be anchored to any EVM chain - through the Account Abstraction wallet. -
- A community admin adds members by email address or - EncryptID account to a distribution list. Hit issue, - and each member receives tokens in their r-Stack wallet instantly. Recipients - who haven't signed up yet get an invite link — their tokens are held in - escrow until they create a passkey, at which point the allocation transfers - automatically. No wallet addresses to copy-paste, no chain selection, no - confirmation dialogs. -
- Because tokens live in the shared CRDT layer, every r-Stack app can read and - write them. rVote can weight votes by token holdings. - rFunds can allocate budgets proportionally. - rWallet can gate treasury access by membership tokens. - rCart can accept community tokens as payment. The - token is a primitive that flows through the entire stack, not a siloed balance - locked inside one app. -
- Community Admin - | - | 1. Add members (email or EncryptID) - v - ┌──────────────────────────────────────────────────────┐ - | Token Issuance (BFT-CRDT) | - | | - | 2. Define token: name, supply, distribution rules | - | 3. Issue → tokens replicate across CRDT mesh | - | 4. Members receive in r-Stack wallet instantly | - └──────────────────────────────────────────────────────┘ - | - | Tokens are usable immediately across: - v - ┌──────────┬──────────┬──────────┬──────────┐ - | rVote | rFunds | rWallet | rCart | - | weighted | budget | treasury | payment | - | voting | shares | access | method | - └──────────┴──────────┴──────────┴──────────┘ - | - | Optional: bridge to on-chain (ERC-20) - v - EVM Chain (via Account Abstraction wallet) -
- Issue a token that represents membership in your community space. Gate - access to private canvases, files, or voting channels. Revoke by removing - the token. No smart contract audit needed — the CRDT ledger - is the source of truth, and permissions propagate in real-time. -
- Reward members for participation: attending meetings, completing tasks, - contributing content. Credits accumulate in the CRDT ledger and can be - redeemed for governance weight in rVote, budget - allocation in rFunds, or community marketplace - purchases in rCart. -
- Create a project token, distribute to supporters, and track contributions - transparently. Supporters can see exactly how funds flow through - rFunds and vote on allocation through - rVote. The full history is auditable by - anyone holding the token. -
- Start with off-chain CRDT tokens for zero friction and zero cost. - When your community needs on-chain guarantees — for DeFi - composability, cross-community exchange, or regulatory compliance — - the CRDT ledger can be bridged to an ERC-20 - token through the Account Abstraction wallet with a single action. -