OxiCloud
File Storage & SyncA fast self‑hosted cloud for files, calendars, contacts and office editing without the complexity of a heavy stack
Features
- Standard protocols built‑in: WebDAV, CalDAV, CardDAV for file and calendar/contact access
- Web UI with uploads, previews, sharing, trash, search and favorites
- Modern authentication (JWT, Argon2id) plus OIDC/SSO support and role‑based permissions
Recent releases
View all 17 releases →- Hardened OIDC authentication with email-style username provisioning and sanitized claims.sub
- Fixed session-expiry issues on HTTP deployments
- Pluggable storage backends with admin UI for S3, Azure, and local environments
- CDC-based sub-file deduplication with FastCDC, BLAKE3 hashing, and parallel uploads
- Public share page with direct download support
Full changelog
OxiCloud 0.5.6 is a substantial release built from 99 commits across 191 changed files since v0.5.5. The main themes of this release are storage flexibility, smarter deduplication, stronger authentication compatibility, and a much more polished web experience.
Highlights
- Added pluggable storage backends with admin UI support for S3, Azure, and local storage.
- Introduced CDC-based sub-file deduplication powered by FastCDC, BLAKE3 chunk hashing, parallel chunk storage, and manifest-based reconstruction.
- Added a public share page with download support and improved shared, recent, and classic navigation flows.
- Hardened OIDC and auth handling for email-style usernames, sanitized
claims.sub, addedWWW-Authenticatehandshake behavior, and fixed session-expiry issues on HTTP deployments. - Delivered broad frontend and CSS refactors that simplify the codebase while improving shared items, multi-select actions, search, music navigation, icons, and theming.
- Improved deployment and operations with rustls-only Azure Docker builds, Windows CRLF fixes, PostgreSQL data path fixes, updated docs, and the first steps toward Nix packaging.
New Features
- Pluggable storage backends with admin UI integration for S3, Azure, and local environments.
- Content-defined chunking deduplication with smarter chunk reuse and parallel upload paths.
- Public share page with direct download support.
- Shared-state visibility in the classic file view.
- Better section controls and multi-select action layout in the frontend.
- VitePress documentation site work and expanded localization coverage.
Fixes And Improvements
- Fixed OIDC username provisioning edge cases and claim sanitization.
- Fixed recent-section routing, hash navigation, shared-view behavior, file-list display, device-verification styling, and select-all wiring.
- Restored external thumbnail lookup and switched thumbnail deduplication to
blob_hash. - Reduced Docker build friction by moving Azure crates to rustls and correcting image references.
- Improved performance for hashing, thumbnail generation, audio metadata extraction, cache invalidation, and upload timeout scaling.
- Applied broad JS/CSS/Biome cleanup, improved JS module bundling, and simplified icon handling and theme styling.
- Added Windows CRLF compatibility and PostgreSQL data-location fixes.
Thanks
A huge thank you to everyone who contributed to this release.
Special thanks to Edouard Vanbelle for the large wave of frontend and UX improvements, Dionisio Pozo / DioCrafts for the core platform, storage, deduplication, and release work, Chris Mann and the Les Grands Voisins side of the project for collaboration and incoming changes, BillionClaw for authentication and documentation fixes, Mathieu Boutolleau for deployment improvements, Subhranil Sarkar for Windows compatibility, and su77ungr for standards-compliance improvements.
Thank you all for the code, reviews, ideas, testing, polish, and persistence that made OxiCloud 0.5.6 possible.
- music player with queue, shuffle, repeat
- drag-and-drop playlist reordering
- file URL bookmarking
- Docker image publishing restored for v0.5.4 and latest
- Browser history navigation with bookmarkable folder URLs
- OpenAPI spec generation for REST API
- Fix RUSTSEC-2026-0037 (quinn-proto vulnerability)
- Kubernetes Helm Chart
- SQLx migration system
- Drag & drop into breadcrumbs
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.