ONYX.

v0.1 "Cinder" · skeleton shipped

The self-hosted platform
your storage deserves.

ONYX — the Online Storage System — is an open-source NAS and infrastructure platform: Btrfs storage with first-class snapshots, virtualization, S3-compatible object storage, backups and app hosting. Enterprise-grade fundamentals, home-tier hardware, zero cloud accounts.

Get started Design docs
$ git clone https://github.com/innotelinc/onyx && cd onyx && cp .env.example .env && ./setup.sh
< 512 MBidle RAM target
< 60 sboot to login
6 protocolsSMB · NFS · FTP · SFTP · WebDAV · Rsync
11 servicesGo control plane · Rust data plane

Storage-first, app-friendly, lightweight.

The storage safety of TrueNAS, the app experience of a modern home server — at a fraction of the hardware appetite.

Safe by default

Btrfs checksums, quotas and scrub; snapshots on; atomic A/B updates with auto-rollback. Every destructive action has a restore path.

Low hardware appetite

Boots in under a minute and idles under 512 MB — a mini-PC, a server, or the laptop in the drawer is enough.

One share model

Create a share once, expose it over SMB, NFS, FTP, SFTP, WebDAV and Rsync. Config is rendered, validated and reloaded atomically.

Hotplug that just works

Kernel uevent-driven device detection: plug a drive in and it's mounted and shared almost instantly — no daemon zoo, no polling.

Modular services

Small, single-purpose daemons behind one typed gRPC API — Rust where the filesystem demands safety, Go for fast orchestration.

Private by design

Local-first, no mandatory cloud account, no telemetry. SSO via Authentik (OIDC) for every service, wildcard TLS out of the box.

A real system, not a slide deck.

The v0.1 "Cinder" skeleton is installable today: bootable OSTree base image, systemd services, gRPC contracts as the source of truth, and a CLI that talks to the whole stack.

onyx-core · Go

Control plane: system status, share CRUD, config applier, hotplug reconciler.

onyx-storaged + onyx-privd · Rust

Data plane: pool discovery, uevent hotplug, SMART health — with a single root privilege boundary.

onyx-api + onyx CLI

HTTP gateway with a versioned REST surface, and the onyx CLI that drives it all.

Platform daemons

Snapshots, backups, VMs, apps, AI advisor, S3 object store — proto contracts defined, landing per milestone.

# build + run the whole control & data plane
$ make bootstrap build
$ scripts/dev.sh start

$ bin/onyx status
core 0.1.0-dev
  onyx-core      SERVING
  onyx-storaged  SERVING
  onyx-shared    SERVING
  onyx-privd     SERVING

$ bin/onyx share create media /mnt/onyx/pool1/@data/media --smb --nfs
share 'media' created — rendered smb.conf + exports, reloaded

One platform, six doors.

Every surface hangs off its own subdomain with a wildcard Let's Encrypt certificate — provisioned automatically, TLS terminated at Nginx Proxy Manager, SSO via Authentik.

Appapp.onyx.innotel.uslive APIapi.onyx.innotel.uslive Identityauth.onyx.innotel.us · Authentiklive Storagestorage.onyx.innotel.us · S3live Backupbackup.onyx.innotel.uslive Adminadmin.onyx.innotel.uslive

Roadmap.

Monthly cadence during beta — public, honest, and driven by the design docs.

v0.1 "Cinder"

Skeleton: bootable OSTree base, onyx-core, storage daemons, API, CLI, platform layer.

shipped
v0.2 "Flint"

Files: Prism web UI, file explorer, SMB/NFS shares UX, users & permissions.

next
v0.3 "Obsidian"

Safety: snapshots + rollback UI, scrub scheduling, backup jobs, SMART monitoring.

later
v0.4 "Jade"

Apps: app store + sandboxing, Docker integration, VMs, full protocol surface.

later
v0.5 "Quartz"

Intelligence: AI admin assistant, audit reporting, advanced search, mobile app.

later
v1.0

Release: security audit, docs, hardening, LTS update channel.

later