Designed for security and maintainability.
OpenPrivateDrive is built on a modern, transparent technical stack that prioritizes file isolation, permission-aware workflows, and private deployment.
The Architecture Model
Unlike shared SaaS clouds, OpenPrivateDrive runs where your documents live. The application manages the "routing" and "authorization" layers while the actual file bytes are stored on your private infrastructure.
Flask App Factory Architecture
Clean separation of concerns with the application factory pattern, ensuring maintainable and testable code.
Service Layer Purity
Business logic for encryption, file management, and sharing is encapsulated in a dedicated service layer.
Permission Engine
A centralized system that validates ownership and role-based permissions (Viewer, Editor, Manager, Owner).
Private Storage Outside Web Root
Uploaded files are stored outside the public directory, preventing direct web access and enforcing authorization.
UUID-Only File Routing
Files are identified and served via UUIDs, obfuscating physical storage paths and preventing metadata leakage.
Background Processing Pipeline
Background jobs handle preview generation, document conversion, text extraction, thumbnail creation, cleanup, and quarantine-aware processing.
API-First Design
The core dashboard and future mobile apps communicate with a secure, standardized REST API.
Conversion d'aperçu Office
Aperçu de document LibreOffice via PDF pour les fichiers DOCX, XLSX, ODT et ODS.
Miniatures riches
Miniatures WebP générées pour les images, PDF, fichiers Office et ressources vidéo.
Liens de demande d'upload public
Liens d'upload partenaire à usage unique avec mots de passe optionnels, expiration et limites de taille.
Liens publics sécurisés
Partages de téléchargement externe avec mots de passe obligatoires et expiration configurable.
Deployment Diagram
Architecture showing user traffic through secure proxy to isolated private infrastructure.
Technical Essentials
- Language Python (Flask)
- Database SQLite / PostgreSQL
- Frontend JavaScript (Vanilla) + Tailwind
- Deployment Docker / Linux / VPS
- Sécurité AES-256-GCM, Scrypt, CSP, HTTPS
Service Layer Purity
By strictly separating business logic from the routing layer, OpenPrivateDrive keeps permission checks, encryption rules, preview restrictions, and API behavior consistent across the Web UI and mobile clients.
Ready to inspect the source code?
The entire platform is transparently auditable and available on GitHub.