Manifesto

Manifesto is a free, open-source app for notes. It has a simple interface of sticky notes.

• Local-first: it works in the browser, and it does not need a server.
• You can self-host a server. The server gives sync between devices, accounts with admin tools, live collaboration, link previews and an MCP endpoint for AI assistants.
• Markdown and interactive checklists.
• Tags, colors, pinning, archiving, reminders and version history.
• Full-text search, link sharing and auto-notes, which plugins make.
• Export and import of your data.
• Rebrandable: you can run it with your own name, description and icons.
• PWA for mobile use and offline use.

Preview | Documentation | Contributing | MIT License

Built with

• TypeScript: programming language
• Preact: UI framework
• Vite: client build and dev server
• Tailwind CSS: styles
• Milkdown: Markdown editor
• Yjs: live collaboration
• Hono: server framework
• SQLite: default server storage. PostgreSQL is an alternative.

Deployment

Each release has a client bundle and a server image. The build sets the operating mode of the client. Thus, select the mode first.

• Client: manifesto-client-vX.Y.Z.zip is an open-mode static site for any static host. To connect it to a server, edit two lines of its index.html. For all other connected-mode clients, build from source with VITE_MANIFESTO_SERVER set.
• Server: the ghcr.io/tatuarvela/manifesto-server Docker image. Run it behind an HTTPS reverse proxy.

Configuration

• Client: VITE_* variables at build time. One of them is the server URL, which selects the operating mode. See .env.example.
• Server: environment variables at runtime. They include the storage driver (sqlite or postgres) and the auth provider (local or oidc). See .env.example.
• Custom instances: the product name, description and icons. Set them in the source, or edit a release bundle.

Security

• Auto-notes run JavaScript that the user supplies. The code runs in a sandboxed iframe and worker, with an opaque origin and a timeout.
• DOMPurify sanitizes rendered Markdown. The app validates incoming share links before it shows them.
• The Content Security Policy of the client permits connections only to its own origin and to the configured server. The fonts are in the bundle. Thus, the client does not contact a third party.
• Accounts use argon2id passwords or OIDC with PKCE. Login has a rate limit. Sessions have an idle expiry and an absolute expiry.
• The server isolates the notes of each user. Collaborative editing checks the owner of the note.
• The server gets link previews only from public addresses. Their images go into the note. Thus, when you look at a preview, the app does not contact a third party. LINK_PREVIEWS=off stops the fetches.
• The initial admin of a new server gets a random password, which the server prints when it starts. It never gets a default password. A password that an admin gives can be used one time only. A reset signs the account out on all devices, and closes the open sockets too.
• Server images are signed, and have an SBOM and build provenance. A scan for known vulnerabilities runs each week.

To report a vulnerability, see SECURITY.md.