Teams, encrypted sharing and self-hosted data server

A team shares sites, databases, DNS keys and integrations. Everything is encrypted with a team key, itself sealed for each member with their public key (RSA-OAEP): the server never sees credentials in clear text.

Create a team and invite people

1. Open Teams

   The "people" icon in the top left, then New team. Creating teams is included in the Team plan and during the trial.

2. Invite by email

   If the person already has an account, they join right away. Otherwise the invitation waits for them when they sign up.

3. Share the key

   For a new sign-up, click Share key on their row: their copy of the team key is encrypted for them only.

Then file a site under the team from the site manager (vault / folder field): it appears for every member, in real time.

Roles and permissions

On top of the owner, admin and member roles, each person has per-feature permissions: files, terminal, database and DNS. An intern can transfer files without seeing the database or the DNS zones.

Presence, activity and conflicts

• Presence: the sidebar and file lists show who is connected and who is editing what.
• Activity log (owners only): connections, transfers, file and DNS changes, filterable by member and action.
• Overwrite protection: if a file changed on the server since your copy, the upload is blocked and you are warned.

Host the team's data yourself

With the Business offer, a team's sites, API keys, folders, permissions and activity log can live on your data server. Accounts and licences stay in the Naucturne cloud.

1. Deploy the server

   The onprem folder ships a docker compose stack (PostgreSQL, PostgREST and Caddy for HTTPS). The server checks every request against the cloud's public keys, with no shared secret.

2. Move the team

   The owner opens Teams → Data storage, enters the URL, clicks Test then Move data to this server. Members switch over on their next sign-in.