Your server. Zero trust required.

TilliT server is zero-knowledge: it transports encrypted messages without ever being able to read them. Installable in minutes, runs on Raspberry Pi.

Installation guide GitHub

Why host your own server?

TilliT is designed for zero-knowledge: even if you run the server, you can't read users' messages. But you control where data resides and who can access the infrastructure.

Data sovereignty

Data stays on your hardware. No third-party cloud, no foreign jurisdiction.

Access control

Decide who can register, which policies apply, how to manage data lifecycle.

Total privacy

Zero-knowledge server + Signal Protocol encryption = no one can read, not even you.

Minimum requirements

TilliT server is designed to be lightweight.

Hardware

• RAM: ~100-150MB
• Storage: Depends on archived messages
• CPU: Any (ARM or x86)
• Examples: Raspberry Pi 4, basic VPS, NAS

Software

• Docker (recommended) or bare-metal
• Linux (Debian, Ubuntu, Alpine)
• SQLite (default) or MariaDB + Redis
• Internet connection (static IP not needed with Tor)

Network modes

4 ways to expose your server, based on your needs.

🧅 Tor Hidden Service

Zero external dependencies. No public IP, no domain. Maximum privacy. TilliT apps support Tor natively.

☁️ Cloudflare Tunnel

Expose the server via Cloudflare without opening ports. Requires Cloudflare account (free).

🔒 HTTPS (tillit.cc)

Automatic DDNS via tillit.cc. SSL certificate included. The simplest solution for dynamic IP.

🏠 Local HTTP

For private/LAN networks. No internet exposure. Ideal for testing or purely local use.

Installation

One command to start. The interactive installer guides you.

curl -fsSL https://raw.githubusercontent.com/tillit-cc/tillit/main/scripts/install.sh | sudo bash

What the installer does

1. Checks system requirements
2. Asks which network mode to use
3. Configures Docker and downloads the image
4. Generates configuration keys
5. Starts the server

Estimated time: 5-10 minutes · Documentation: github.com/tillit-cc/tillit

Architecture

┌─────────────────┐         E2E encrypted          ┌─────────────────┐
│   TilliT App    │ ◄────────────────────────────► │   TilliT App    │
│   (iOS/Android) │                                │   (iOS/Android) │
└────────┬────────┘                                └────────┬────────┘
         │                                                  │
         └──────────────────────┬───────────────────────────┘
                                │
                   ┌────────────┴────────────┐
                   │     TilliT Server       │
                   │   ┌─────────────────┐   │
                   │   │  Zero-knowledge │   │
                   │   │  Can't decrypt  │   │
                   │   │  Relay only     │   │
                   │   └─────────────────┘   │
                   │                         │
                   │   SQLite / MariaDB      │
                   │   (encrypted blobs)     │
                   └─────────────────────────┘

Who should host a server?

Families

A Raspberry Pi at home = private chat for the whole family. No data on external servers.

Businesses

Internal communications under total control. Compliance, data residency, custom policies.

Communities

Independent server for your group. Controlled invitations, private rooms, total autonomy.

Sensitive organizations

Journalists, activists, NGOs. Tor mode for maximum anonymity. No IP, no tracking.

Ready to start?

Install your TilliT server in minutes.

Go to GitHub Download the app