OxiCloud
OxiCloud is a self-hosted cloud storage platform written in Rust that combines file storage, calendars, and contacts in a lightweight alternative to Nextcloud. It emphasizes standards-based protocols (WebDAV, CalDAV, CardDAV), fast deployment, and lower operational overhead than traditional PHP-based cloud suites.
Key facts
Objective fields from the source. Values we can't verify are shown as “Unknown” rather than guessed.
| Field | Value |
|---|---|
| Repository | AtalayaLabs/OxiCloud |
| Owner | AtalayaLabs |
| Primary language | Rust |
| License | MIT — OSI-approved |
| Stars | 3.4k |
| Forks | 159 |
| Open issues | 81 |
| Latest release | v0.8.2 (2026-07-06) |
| Last updated | 2026-07-07 |
| Source | https://github.com/AtalayaLabs/OxiCloud |
What OxiCloud is
Built on Rust with Axum, PostgreSQL backend, and hexagonal architecture. Implements WebDAV/CalDAV/CardDAV protocols natively, JWT/Argon2id authentication, OIDC/SSO support, WOPI integration for office editing, and Docker/Compose/Helm/Nix packaging. Current version v0.8.2 (July 2026) with 81 open issues.
Get the OxiCloud source
Clone the repository and explore it locally.
git clone https://github.com/AtalayaLabs/OxiCloud.gitcd OxiCloud# follow the project's README for install & configurationNeed it deployed, integrated, or customized instead? DEV.co ships production installs.
Best use cases
Implementation considerations
- PostgreSQL database is mandatory; no SQLite option reduces barrier for very small deployments. Requires external database management or Docker containerization.
- Base URL configuration critical before first login for reverse proxy or domain-based access; misconfiguration can block access. Review OXICLOUD_BASE_URL setup in deployment guide.
- WOPI office editing requires separate Collabora or OnlyOffice container; add integration and container management complexity if document editing is required.
- Memory tuning via MIMALLOC_PURGE_DELAY may be necessary in RAM-constrained environments. Default behavior suitable for typical small-team deployments.
- No built-in backup tooling documented; operator must provision database backups and file storage redundancy separately.
When to avoid it — and what to weigh
- Require feature parity with Nextcloud ecosystem — OxiCloud explicitly does not mirror Nextcloud's plugin ecosystem. Missing desktop sync client, mobile apps, and end-to-end encryption (all planned, not shipped). Narrow if heavy customization through extensions is needed.
- Need production-hardened reference deployments — Project created Feb 2026 with v0.8.2 as latest release. Early stage. No security audits, penetration test results, or large-scale production deployment case studies published. Suitable for self-hosted non-critical workloads only at this time.
- Require vendor support or SLAs — Community-driven open source. No commercial support tier, maintenance guarantees, or incident response SLAs documented. Deployment and issue resolution fall entirely on the operator.
- Need offline-first or end-to-end encryption today — E2EE listed as planned. DAVx5 Android support marked partial. If data confidentiality during transit/rest or offline capability are hard requirements, wait for roadmap completion or choose alternatives.
License & commercial use
MIT License (MIT). Permissive OSI-approved license allowing commercial use, modification, and distribution with minimal restrictions (attribution and license notice required). No copyleft or patent clauses.
MIT License permits commercial use. However, no commercial support, warranty, or liability framework documented. Using OxiCloud in commercial contexts (e.g., as a SaaS offering or mission-critical system) places all maintenance, security, and incident response burden on you. Review indemnification and liability policies with legal before commercial deployment.
DEV.co evaluation signals
Editorial assessment — not user reviews. Directional, with an explicit confidence level.
| Signal | Assessment |
|---|---|
| Maintenance | Active |
| Documentation | Adequate |
| License clarity | Clear |
| Deployment complexity | Low |
| DEV.co fit | Good |
| Assessment confidence | High |
Project implements JWT, Argon2id hashing, OIDC/SSO, and role-based access control. No public security audits, penetration test reports, or CVE history published. Early-stage software; unknown attack surface and potential for undiscovered vulnerabilities. Requires defense-in-depth (TLS termination, network isolation, regular updates, monitoring) when handling sensitive data. Use on internal networks or behind security-hardened reverse proxies until maturity increases.
Alternatives to consider
Nextcloud
Mature PHP-based self-hosted suite with extensive plugin ecosystem, mobile apps, and enterprise support. Higher resource overhead and operational complexity; suitable for larger deployments with advanced customization needs.
Seafile
Lightweight Python/Go self-hosted file sync with client apps and team collaboration. Simpler than Nextcloud; lacks native CalDAV/CardDAV support but includes built-in desktop/mobile clients.
Synology NAS (DSM + Drive/Calendar/Contacts)
Hardware-integrated appliance with pre-built cloud suite. No self-coding required; closed ecosystem and vendor lock-in; suitable for non-technical teams preferring turnkey operations.
Build on OxiCloud with DEV.co software developers
Start with Docker Compose quickstart, configure OIDC/SSO integration, and test DAV client compatibility in your environment. Engage Devco for deployment architecture, security review, or custom integration support.
Talk to DEV.coRelated on DEV.co
Explore the category and the services that help you build with it.
OxiCloud FAQ
Does OxiCloud work with standard calendar and contact apps on macOS, iOS, and Android?
Can I migrate data from Nextcloud to OxiCloud?
What is the minimum infrastructure to run OxiCloud?
Is OxiCloud production-ready?
Software developers & web developers for hire
DEV.co is a software development agency delivering custom software development services to companies building on open source. Our software developers and web developers design, integrate, and ship production systems — spanning web development, APIs, AI, data, and cloud. If OxiCloud is part of your open-source devops roadmap, our team can implement, customize, migrate, and maintain it.
Ready to evaluate OxiCloud for your self-hosted infrastructure?
Start with Docker Compose quickstart, configure OIDC/SSO integration, and test DAV client compatibility in your environment. Engage Devco for deployment architecture, security review, or custom integration support.