build 0.1.0·aes-256-gcm / post-quantum·eu/de·ram onlyrelay online
SELF-HOST · BUSL-1.1
04run your own

Deploy your relay

BUSL-1.1 source-available. Free for ≤5 users. Raspberry Pi 4 runs the full stack at < 200 MB RSS.

01 · one-liner
$ curl -fsSL https://paramant.yoursafetynet.tech/install.sh | bash
02 · docker compose
git clone https://git.yoursafetynet.tech/amir/paramant
cd paramant
cp .env.example .env
echo "ADMIN_TOKEN=$(openssl rand -hex 32)" >> .env
echo "SESSION_SECRET=$(openssl rand -hex 32)" >> .env
docker compose -f infra/docker/compose.prod.yml up -d
curl http://localhost:4000/health
03 · kubernetes / k3s
kubectl create namespace paramant-platform
kubectl -n paramant-platform create secret generic paramant-secrets \
  --from-literal=DATABASE_URL=postgresql://... \
  --from-literal=ADMIN_TOKEN=$(openssl rand -hex 32) \
  --from-literal=SESSION_SECRET=$(openssl rand -hex 32)
./infra/k8s/apply.sh --tag v0.1.0
compliance
  • · NIS2 (EU 2022/2555) — incident reporting + supply-chain controls
  • · IEC 62443 — industrial/OT security
  • · NEN 7510 — healthcare information security
  • · GDPR — EU jurisdiction, Hetzner DE, no US CLOUD Act