Run Cryptomator Hub on your own infrastructure and get your team on board with client-side encryption for your cloud storage.
Hub consists of three services. You can find more documentation at docs.cryptomator.org.
Hub manages your team members, their devices, and their access to shared vaults.
Keycloak is the identity provider. It authenticates your team members for Hub.
PostgreSQL is the database shared by both the Hub application and Keycloak.
Each option below is a complete, tested walkthrough. Pick the one closest to your environment. Every setting these guides use is a regular chart value or Compose setting, so you can mix and match them as your environment requires.
Try Hub locally with one Docker Compose command. It uses plain HTTP and well-known passwords. It is not for production.
Read the GuideRun Hub with bundled Keycloak and PostgreSQL on a single Docker host, behind Traefik with certificates from Let's Encrypt.
Read the GuideDeploy Hub with the published Helm chart, bundled Keycloak and PostgreSQL included, behind an nginx or Traefik Ingress.
Read the GuideDo you already operate your own Keycloak? Then deploy Hub without the bundled one and connect it to yours instead. The guide for an existing Keycloak shows how.
Do you want to develop Hub itself or the Helm chart? The deployment examples also cover the development setups.
These guides cover common scenarios. Feel free to contact us if you want us to tailor the setup to your specific needs.
Contact Us