Two worlds · one binary
One install switch (VAYUOS_MODE) runs VayuPress as a public Clearnet Space or a fully anonymous, web-only Tor Space — each with its own database, its own identity, and nothing crossing between them. Flip the toggle above to preview each.
Content moves between worlds only through a checksummed, offline-movable vayupress migrate export|import bundle — accounts, mailboxes, PGP keys and chat IDs never cross. Read ADR-0141 →
Why it exists
A website builder for the site. WordPress and a dozen plugins for the blog. Google or Microsoft for the mail. An analytics vendor watching your readers. A SaaS dashboard tying it together — each its own bill, its own login, its own cloud you don't control. VayuPress is the opposite bet: your website, your blog, your mail, your analytics and your admin in one binary you run yourself — nothing phones home, nothing is rented, nothing can be taken away.
A real website and a Ghost-class blog — block editor, whole-site themes, media, members, SEO — with every word in your own SQLite file. No SaaS, no export wall.
A native SMTP/IMAP/POP3 mail server with DKIM and automatic PGP is built into the binary — send and receive from your own domain, read it in the official app, no third-party relay.
End-to-end PGP, encrypted keys at rest, and cookieless analytics with zero trackers and no PII on your readers. The only outbound calls are the ones you configure.
One command · the whole stack
Point yourdomain.com at one VPS, run one install command, and VayuPress stands up your entire online presence — a business website, a blog, and a sovereign mail server with automatic PGP — each on its own subdomain, each with a free Let's Encrypt certificate issued and renewed for you. Then read and send that mail from the official VayuMail app on Android.
Eleven elegant templates — restaurant, shop, studio, clinic, school, portfolio and more. Edit every word from the admin, switch designs live.
The full publishing engine — Ghost-class editor, whole-site themes, members and analytics. Or keep the blog at the root; it's your call, and updates never change it.
A DKIM-signing mail server with automatic end-to-end PGP — keys generated per mailbox, messages encrypted when the recipient's key is known.
Connect a phone in seconds — open the app, enter your domain and sign in once. It provisions a per-device app password (never your real password, revocable any time) and configures IMAP & SMTP for you — no manual server settings. Read, write and send PGP-encrypted mail from your own domain, on the go.
Cookieless analytics and a single control panel (VayuOS) come with it — open source, zero telemetry, all on your own name. Nothing rented, nothing phoning home.
The Vayu suite
Not a bundle of plugins — a single Go process where publishing, mail, chat, bot defense and analytics are first-class citizens. Switch between them below. In the Tor world, VayuMail is webmail-only, VayuTalk is anonymous and rotatable, and VayuTor is already on — the same suite, hardened for anonymity.
Install · one click
VayuOS is an installable app (PWA). Open your console and the browser offers Install VayuOS — it lands on your phone home screen or desktop as a standalone, full-screen app that launches instantly. There's an Install button in the console top bar too, so it's always one tap away.
Turn it on · get paid
A complete, redirect-based monetization suite is built in — no payment SDK is ever embedded, so your strict CSP stays intact. Take money through your own Stripe & PayPal keys, and audit every sale from one Monetization control centre in VayuOS.
Payments live in the Clearnet Space — the anonymous Tor world stays callback-free by design.
Auto-renewing PayPal subscriptions and instant Stripe one-time checkout over a sovereign payments ledger — idempotent fulfilment, webhook receipts, nothing rented.
Connect a self-hosted BTCPay Server and accept Bitcoin, Monero, Ethereum, and stablecoins — funds settle straight into your own wallet, no processor, no custody, no KYC, and it's the one rail an anonymous or Tor buyer can use.
Sell membership tiers that unlock member-only posts, or drop a per-post paywall on any single article — a one-time unlock, remembered per member.
Each paid tier can provision a real VayuMail mailbox — its own quota, an auto PGP keypair + WKD, and VayuTalk — the moment a member joins.
Sell reserved and vanity addresses — bought → paid entitlement → the member claims it and sets a password — with operator approve/revoke and a terms-agreement trail.
A self-serve “Advertise here” panel takes a flat fee and drops each image ad into an operator moderation queue — nothing renders until you approve it.
Every paid section — subscriptions, premium IDs, paid posts, member ads — flows through a single auditable Orders ledger you can see end to end.
See it live
The design contract
"Complexity that exists must be visible, bounded, and owned. VayuPress makes nothing disappear — it makes everything observable."
How it compares
Most platforms bolt sovereignty, observability and governance on as plugins — or sell them as a hosted tier. VayuPress ships them in a single binary, with every byte of behaviour owned by the operator.
| Capability | |
|---|---|
| — Partial Plugin Hosted only n/a |
Comparison reflects out-of-the-box, self-hosted defaults. WordPress/Ghost capabilities marked “Plugin” are achievable via third-party extensions; Substack is hosted-only and not self-hostable.
Companion tools
Ship in minutes
❯ Tip · go live with a domain
Point your domain at the VPS and run the installer — it provisions nginx and free Let's Encrypt certificates for your website, blog., and mail. hosts automatically. To add the real-time VayuTalk relay, point one extra record — talk.yourdomain.com → your server, CDN proxy off — and re-run the installer; it adds the certificate, vhost and app advertisement for you. Full steps in the installation guide.
Open source · forever
Apache-2.0 licensed, dependency-light, documented to the decision level — VayuPress is for operators who refuse to rent their stack.
The licence will not change
VayuPress is Apache-2.0, permanently and unconditionally — not contingent on funding, adoption or acquisition. No reciprocal move, no source-available move, no dual licence, no open-core split. Free for individuals and large companies alike, deliberately: a licence that carves out the powerful still has a gatekeeper.
There is no paid tier and no feature held back. There is no Contributor Licence Agreement and there never will be one — so nobody, including the maintainer, can accumulate the rights needed to sell proprietary licences to this work.
And it does not ask you to trust that: every release already published is irrevocably Apache-2.0 as a completed legal fact, and if a future maintainer ever broke the pledge, forking the last Apache-2.0 release needs nobody's permission. The reasoning, and what structurally backs it.