Hey everyone! :)

I am currently looking to replace Obsidian with a self-hostable alternative (that preferably also uses Markdown - but it’s not a must) but instead of storing the files directly on disk has a way to have all the files within in an encrypted vault / binary format.

Reason being I have very very sensitive data that needs to be stored (employee & medically related).

I read that Logseq used to support this feature but it has since been deprecated, some light googling didn’t surface any results other than that so I would be delighted if anyone had any suggestions!

Thanks so much in advance for any and all help! :)

edit: Forgot to mention that it needs to support Linux as well as Android

1 point

If you are dealing with compliance seek help from a professional

permalink
report
reply
4 points

If you are storing manly on one device and are looking for a relatively “simple” solution for encryption at rest I would suggest to just encrypt the folder/directory/image the data are living in.

Of course, this way you have to decrypt the data while you are using it. However, it separates the responsibility from the note taking app.

This may or may not be a good solution for your use case, but it should be fast and easy to implement.

I used to do this with some mildly sensitive data using a mac encrypted disk image with plain markdowns files inside. I accessed the files with vscode, but I don’t see why it wouldn’t work with Obsidian. It may just be a bit of a hassle to open the vault each time.

permalink
report
reply
1 point
*

I wanted to write the same thing. have the notes app do the notes thing and handle encryption elsewhere.

as to apps, I suggest QOwnNotes. it’s markdown, highly configurable so you can make it minimalistic AF, stores notes in invidual files and folders. it also has a bunch functionality like syncing to nexctcolud and such, but I’d advise against it, just use it as a notes editor. you don’t have to selfhost anything, make it use the e.g. Documents/Notes folder and you can use syncthing to securely replicate it to other devices.

permalink
report
parent
reply
2 points

I think this is the best answer. Separation of concerns and all. And OP can keep using whatever notes app he is right now or even switch to another, without the additional encryption requirement.

permalink
report
parent
reply
2 points

If you like the command line you could consider jrnl

https://jrnl.sh/en/stable/

permalink
report
reply
7 points

You can selfhost Standard Notes. The notes are encrypted client side before they reach the server.

permalink
report
reply
16 points

Joplin can encrypt and it is selfhostable and uses Markdown

Benefit: apps for every platform

permalink
report
reply
7 points

After some more research it seems that Joplin only E2E encrypts notes at transport and not at rest[1]? e.g. it only stores plain text files on the harddrive just like Obsidian does? This sadly makes it not viable for my use case :/

[1] https://discourse.joplinapp.org/t/requesting-encryption-of-local-joplin-data-at-rest-encryption/15145

permalink
report
parent
reply
1 point

They do encryption at rest too. Really good notes app and it’s cross platform too. Only missing a “web” client for when you want to access your notes on a computer without Joplin installed (but that defeats the purpose of the E2EE IMO)

permalink
report
parent
reply
5 points

E2e in transport is https with extra steps 😅

permalink
report
parent
reply
11 points

No it is fully encrypted, even on the server. This topic was years old. You can read a good explanation here

permalink
report
parent
reply

Selfhosted

!selfhosted@lemmy.world

Create post

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.

Rules:

  1. Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it’s not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

Community stats

  • 3.4K

    Monthly active users

  • 1.6K

    Posts

  • 14K

    Comments