A complete suite of open-source tools for community self-governance — tied together with zero-knowledge identity and data sovereignty to the user.
rStack combines the latest open-source tools into a cohesive platform that communities can self-host on their own infrastructure or run on shared community servers. One login, one data layer, twenty apps — no vendor lock-in, no surveillance, no kill switch.
Every app is source-available. Read the code, fork it, audit it, contribute back. No black boxes.
Run on your server, a community VPS, or a Raspberry Pi. Your hardware, your rules, your data.
Passkey-based auth with on-device key derivation. The server never sees your private material.
End-to-end encrypted. CRDT-synced. Your community's data stays yours — by architecture, not policy.
rStack isn't a monolith. It's four independent layers that compose into something greater than the sum of their parts. Each layer can be swapped, extended, or self-hosted independently.
Each app handles one job well — notes, voting, budgets, maps, chat. They share data through the sync layer below, so a vote in rVote can reference a budget in rFunds without either app knowing the other's internals.
Conflict-free replicated data types keep every app in sync — peer-to-peer, offline-capable, and eventually consistent. No central database, no single point of failure. Byzantine fault tolerant token ledger included.
One biometric prompt creates your identity, derives encryption/signing/DID keys on-device, and provisions a gasless smart wallet. Social recovery replaces seed phrases. One login for every app.
Every app ships as an optimized Docker container. Traefik handles routing and TLS automatically. Deploy the full stack with a single docker compose up on any Linux server.
Twenty apps organized into seven functional areas. Each area solves a core challenge of community coordination. Use the apps you need — they work independently or as an integrated suite.
The creative workspace. Infinite canvases for spatial thinking, real-time documents for group writing, and a publishing pipeline that turns drafts into print-ready books.
Spatial and temporal coordination for groups. Schedule events across time zones, plan trips collaboratively, and map your community's presence across the world.
Real-time and asynchronous communication channels. Encrypted chat for immediate coordination, shared inboxes for email workflows, and forums for long-form discourse.
Democratic decision-making tools for any group. From lightweight polls to weighted conviction voting, with cryptographically signed ballots that are verifiable but private.
Community economics without crypto literacy. Pool resources, track budgets, run auctions, and manage treasuries — all through the same biometric login, with smart wallets handling the complexity underneath.
Privacy-respecting analytics that your community controls. No third-party trackers, no data brokers, no surveillance capitalism.
A single identity layer that turns a fingerprint or face scan into full-stack access — encrypted storage, signed votes, community treasury, and more — without passwords, seed phrases, or cloud accounts.
Built on WebAuthn passkeys — the same standard behind Face ID and fingerprint unlock. Your identity is bound to your device's secure hardware (TPM / Secure Enclave). Nothing to type, nothing to remember, nothing that can be phished.
Authentication derives a full set of cryptographic keys entirely on your device using HKDF. Encryption keys for files, signing keys for votes, DID keys for portable identity — all generated locally. The server is a relay, never an authority.
Lost your phone? Designate trusted guardians (friends, family, community leaders). Any 3 of 5 guardians can approve recovery after a 48-hour time-lock. No seed phrases, no email resets. Guardians never see each other's identities or your private keys.
Every user gets an ERC-4337 smart wallet — without ever seeing a wallet address or gas fee. Your passkey is your wallet signer. A paymaster sponsors fees. Session keys allow daily operations with a single biometric prompt per session.
You (fingerprint / face scan)
|
v
┌──────────────────────────────────────────────────────────┐
| EncryptID |
| |
| Layer 1: WebAuthn Passkey (hardware-backed) |
| | |
| Layer 2: Derived Keys (on-device, HKDF) |
| |── Encryption Key ── rFiles, rNotes, rSpace E2E |
| |── Signing Key ───── rVote ballots, authorship |
| └── DID Key ───────── portable identity |
| | |
| Layer 3: Smart Wallet (Account Abstraction) |
| |── Gasless transactions (paymaster-sponsored) |
| |── Session keys (one prompt per session) |
| └── Community treasury (multi-sig) |
| | |
| Layer 4: Cross-App SSO |
| └── One login for all r-Stack apps |
└──────────────────────────────────────────────────────────┘
|
v
rSpace · rVote · rWallet · rFunds · rMaps · rFiles · ...
Any r-Stack app can issue tokens through the shared CRDT data layer — no smart contract deployment, no gas fees, no blockchain expertise required. Bridge to on-chain when you're ready.
Tokens are built on Byzantine Fault Tolerant CRDTs — the same conflict-free data structures that power real-time sync across every app. They replicate peer-to-peer, resolve conflicts automatically, and maintain a consistent ledger without a central mint. When ready, the CRDT ledger can bridge to an ERC-20 on any EVM chain through the Account Abstraction wallet.
Gate access to private canvases, files, or voting channels. Revoke by removing the token. Permissions propagate in real-time through the CRDT mesh.
Reward participation: meetings attended, tasks completed, content contributed. Credits accumulate and can be redeemed for governance weight, budget allocation, or marketplace purchases.
Distribute project tokens to supporters. Track contributions transparently through rFunds and vote on allocation through rVote. Full history auditable by token holders.
Start with zero-friction off-chain CRDT tokens. When you need DeFi composability or cross-community exchange, bridge to ERC-20 with a single action through the smart wallet.
rStack doesn't reinvent wheels. Every app is assembled from battle-tested open-source projects — the latest and greatest tools, composed into a cohesive platform.
Infinite canvas engine powering rSpace. Real-time multiplayer drawing, diagramming, and spatial thinking.
CanvasConflict-free replicated data types for real-time sync. Peer-to-peer, offline-capable, eventually consistent.
Sync LayerW3C standard for passwordless authentication. Hardware-backed passkeys via TPM and Secure Enclave.
IdentityThe leading open-source discussion platform. Trust levels, moderation, and rich threading for rForum.
CommunityOpen-source mapping with OpenStreetMap tiles. Powers rMaps, rCal's spatial view, and rTrips route planning.
MappingDecentralized, end-to-end encrypted messaging standard. Interoperable federation for rChats.
MessagingModern typesetting system that's fast, ergonomic, and beautiful. Powers rPubs' document pipeline.
PublishingHigh-performance self-hosted photo management. AI-powered tagging, facial recognition, and mobile backup. Powers rPhotos.
PhotosFederated video hosting with ActivityPub. No algorithms, no ads, no surveillance. Powers rTube.
VideoPrivacy-friendly analytics. No cookies, GDPR compliant, lightweight. Powers rData.
AnalyticsAccount Abstraction standard for smart wallets. Gasless transactions, session keys, and social recovery.
WalletContainer orchestration with automatic service discovery and TLS. The deployment backbone of every app.
InfrastructureEdge-first web frameworks. Fast, lightweight, and deployable anywhere — from Cloudflare Workers to Docker.
FrameworkEvery r-Stack app ships as a Docker container. Clone, configure, deploy. The whole suite runs on a VPS, a home server, or community-shared infrastructure.
$ git clone https://git.rstack.online/rstack $ cd rstack $ cp .env.example .env # set your domain + secrets $ docker compose up -d # that's it ✓ rSpace → space.yourdomain.org ✓ rNotes → notes.yourdomain.org ✓ rVote → vote.yourdomain.org ✓ rFunds → funds.yourdomain.org ✓ rFiles → files.yourdomain.org ✓ rMaps → maps.yourdomain.org ✓ rIDs → id.yourdomain.org ...and every other app in the suite
No SaaS subscription, no per-seat pricing, no usage caps. Run the entire stack for your 5-person co-op or your 500-person organization on a single $10/month VPS. Scale by adding hardware, not upgrading a pricing tier.
Don't want to manage a server? Join a community-hosted instance. Multiple organizations can share infrastructure costs while maintaining isolated, encrypted data spaces. Federate across instances when you're ready.
Need a custom voting algorithm? A different map provider? A branded theme? Fork the repo, change what you need, deploy. Every app is designed to be modified. No permission required.
SaaS tools disappear when the company pivots or shuts down. Self-hosted open-source tools keep running as long as you want them to. Your community's infrastructure doesn't depend on anyone else's business model.
Explore each app independently or see how they work together as a suite. Every app is live and ready to try.
Jump into rSpace and start collaborating on an infinite, real-time canvas
Create a poll in rVote and see cryptographic ballot signing in action
Drop a document into rPubs and generate a print-ready PDF in seconds
Explore rCal's spatiotemporal calendar with ten zoom levels
Pin locations and draw regions on a collaborative open-source map
Explore the community photo commons with AI-powered search and shared albums
Register with a passkey and see zero-knowledge identity in action