KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#developer-tools #codex #typescript #ai-agents #claude-code #dsh #dsh-plugin #deepseek-harness #cli #macos #ai-agent #open-source

umamin

★ 92 Open GitHub ↗

🔏 The platform for encrypted anonymous messages.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<h1>Umamin</h1>
</div>

<div align="center">
  <p>An open-source platform for anonymous communication. 🔏</p>

<br/>

## Overview

This monorepo hosts two open-source apps for anonymous communication:

- **Umamin** — [www.umamin.link](https://www.umamin.link) — the main social platform: a profile-based inbox for sending and receiving **encrypted anonymous messages**. Built with TanStack Start and Hono on Cloudflare Workers, with Drizzle ORM and Turso/libSQL.
- **Umamin Chat** — [chat.umamin.link](https://chat.umamin.link) — **ephemeral, anonymous 1:1 chat**: get matched with a stranger who shares your interests. No sign-up, no history, nothing saved. Built with Vite, React, and Convex.

## Contributing

If you like this project, please consider giving it a star! ✨ If you wish to suggest or work on a new feature, please open an issue to discuss with the community and the project maintainers. We appreciate your interest and look forward to collaborating with you! Please review our [Code of Conduct](./CODE_OF_CONDUCT.md) before contributing.

### Monorepo Structure

**Apps**

| App         | Description                                                                          |
| ----------- | ------------------------------------------------------------------------------------ |
| `apps/web`  | **Umamin** — anonymous messaging platform & landing page (TanStack Start + Hono, Cloudflare Workers) |
| `apps/chat` | **Umamin Chat** — ephemeral, anonymous stranger chat (Vite + React + Convex)         |
| `apps/www`  | The previous Next.js build of Umamin, superseded by `apps/web` in v7.0.0             |

> `apps/web` is the app that serves [www.umamin.link](https://www.umamin.link). `apps/www` is kept only as a rollback target for the migration and is no longer deployed — new work belongs in `apps/web`.

**Packages**

| Package              | Description                                                              |
| -------------------- | ------------------------------------------------------------------------ |
| `@umamin/db`         | Database schema & migrations using Drizzle ORM + Turso/libSQL            |
| `@umamin/encryption` | AES-GCM encryption/decryption utilities (uses `AES_256_GCM_KEY`)         |
| `@umamin/ui`         | Shared UI components and styling (used by every app)                     |

### Prerequisites

- [`Turso CLI`](https://docs.turso.tech/cli/installation) — local libSQL server for **web**
- `Node.js` >= 24 or [`nvm`](https://github.com/nvm-sh/nvm)
- `pnpm` >= 10

> **Umamin (web)** runs on Cloudflare Workers via `wrangler`, which is already a dev dependency — no global install and no Cloudflare account are needed for local development. Workers KV and the rate-limit bindings are emulated locally by Miniflare.

> **Umamin Chat** uses [Convex](https://www.convex.dev) as its backend. `pnpm dev:chat` starts a local Convex deployment automatically (no account or extra install needed), and the chat falls back to an in-memory mock when `VITE_CONVEX_URL` is unset — so you can work on its UI without a backend.

### Install Dependencies

If you're using `nvm`, you can easily switch to the required Node.js version.

```sh
$ nvm use 24 # ignore if you're already on Node.js >= 24
$ pnpm install
```

### Environment Variables

`apps/web` splits its configuration in two, because it runs on Workers:

- **`apps/web/.dev.vars`** — server-side values for the Worker (secrets). Never shipped to the browser.
- **`apps/web/.env.development`** — public, build-time values. Vite embeds every `VITE_*` variable in the browser bundle, so **nothing secret belongs here**. See `apps/web/.env.example`.

```env
# apps/web/.dev.vars — Worker-side (secret)
TURSO_CONNECTION_URL=http://127.0.0.1:8080
TURSO_AUTH_TOKEN= # can be empty for local
AES_256_GCM_KEY=REPLACE_WITH_BASE64_KEY

# Google OAuth (optional)
GOOGLE_CLIENT_ID=YOUR_CLIENT_ID
GOOGLE_CLIENT_SECRET=YOUR_CLIENT_SECRET
GOOGLE_REDIRECT_URI=http://localhost:5173/auth/google/callback
```

```env
# apps/web/.env.development — public, embedded in the bundle
VITE_SITE_URL=http://localhost:5173
VITE_ADS_ENABLED=true # "false" removes every ad surface
```

```env
# packages/db/.env (for the drizzle-kit CLI)
TURSO_CONNECTION_URL=http://127.0.0.1:8080
TURSO_AUTH_TOKEN= # can be empty for local
```

In deployed environments these do **not** come from the files above: Worker secrets are set with `wrangler secret put` (or in the Cloudflare dashboard), and the `VITE_*` values are build variables configured in Cloudflare Workers Builds. Non-secret Worker vars and the KV / rate-limit / cron bindings live in `apps/web/wrangler.jsonc`, split per environment.

Generate an AES-256-GCM key using the helper script:

```sh
$ pnpm aes:generate
# copy the printed key into AES_256_GCM_KEY
```

If you need to use Google OAuth, you must set up your own OAuth client. [Setting up OAuth 2.0 →](https://support.google.com/cloud/answer/6158849)

### Development Server

Run the development servers with Turborepo:

```sh
$ pnpm dev # runs all apps (and local db dev if configured)
```

Run a specific app only:

```sh
$ pnpm dev:web            # Umamin — http://localhost:5173
$ pnpm dev:chat           # Umamin Chat (Vite + local Convex)
```

### Setup Database

> Applies to **web** only — Umamin Chat uses Convex, not Turso/Drizzle.

Start a local libSQL server and run migrations.

```sh
# optional: start local libSQL (turso dev) alongside type-checker
$ pnpm --filter=@umamin/db dev

# generate migrations from schema changes
$ pnpm db:generate

# apply migrations
$ pnpm db:migrate

# open drizzle studio
$ pnpm db:studio

# optional: reset & seed the database with demo data
$ pnpm db:seed

# seeded test account
# username: testuser
# password: 12345
```

### Running Build

After making changes, build the project (runs lint and type checks via tasks).

```sh
$ pnpm build # build all
# or
$ pnpm build --filter=web
$ pnpm build --filter=chat
```

### Tests and Checks

```sh
$ pnpm test                    # every suite, via turbo
$ pnpm --filter=web test:workers  # web's workerd suite (KV, Cache API, argon2 wasm)
$ pnpm check-types             # tsc across the workspace
$ pnpm format-and-lint         # Biome
```

`apps/web` has a second test runner because some of its code can only run inside
workerd — those suites use `@cloudflare/vitest-pool-workers` and are not part of
`pnpm test`. CI runs both.

Once ready, you can submit a pull request for review.

### Contributor List

## Code of Conduct

We are committed to fostering a welcoming, respectful community. Please read and follow our [Code of Conduct](./CODE_OF_CONDUCT.md) when participating in this project.

## Security

If you believe you have found a security vulnerability in Umamin, please do not open a public issue on this repository. Opening a public issue could expose sensitive information before it's addressed. Please read our [Security Policy](./SECURITY.md) for details on how to report a vulnerability.

## License

Umamin is licensed under [GPL-3.0](https://github.com/omsimos/umamin/blob/main/LICENSE).

umamin

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README