OpenCloud Compose

This is a technical setup article by TechHut covering self-hosted OpenCloud, its relationship to Nextcloud, and a Docker Compose deployment. It explains OpenCloud's Go-based services, filesystem storage without a separate database, and the differences in scope between OpenCloud and Nextcloud. The deployment uses the OpenCloud Compose repository with local configuration and data directories, an external NGINX Proxy Manager, a domain with HTTPS certificates, optional Apache Tika full-text search, and browser-based document editing through Collabora or Euro Office. The article was published in August 2026 and updated in September 2026.

OpenCloud is an open-source, self-hosted file-storage and collaboration platform developed by the Heinlein Group. It is descended from ownCloud Infinite Scale and rewritten in Go, providing file management and sharing for teams and organizations without requiring a separate database instance or schema migrations. The platform supports optional full-text search, browser-based document editing through an integrated office suite, access controls, two-factor authentication, encryption, and file versioning. It is available for on-premises operation or as a SaaS offering through selected partners, with a cloud-native architecture intended for large data volumes and growing teams.

Composio is a developer platform for orchestrating just-in-time tool calls, secure delegated authentication, sandboxed execution environments, and parallel execution across integrations with 1,000+ applications. It is designed to let applications and AI agents invoke external tools safely and at scale.

Openship is an open-source, self-hostable application deployment platform with built-in CI/CD. It takes a repository, detects or supports its stack, builds and ships the application as containers, and handles routing and TLS termination. Deployments can be controlled through a desktop app, web dashboard, or CLI; GitHub webhooks support push-to-deploy workflows, and the platform supports repeatable rollbacks. The control plane can run locally in the desktop app, as a self-hosted server, or through Openship Cloud. In Compose mode it runs the platform stack on a Docker host and can host deployed applications there; in bare mode it runs as a lightweight process and deploys to a server over SSH or to the cloud.

compose-lint is a security-focused static-analysis linter for Docker Compose files such as docker-compose.yml and compose.yaml. It checks for privileged containers, missing capability restrictions, host namespace or network sharing, wildcard port bindings, unpinned images, Docker socket and sensitive host-path mounts, plaintext credentials, and related misconfigurations, with rules grounded in the OWASP Docker Security Cheat Sheet and CIS Docker Benchmark. The Python tool runs locally or in CI, can export SARIF results, and provides mechanical fixes for unambiguous findings with a dry-run preview. It is distributed through PyPI, can also be run ad hoc with uvx or pipx, and has a multi-architecture Docker image that runs as a non-root user.