Oneva is built on open-source software. This page lists the significant components in the Oneva platform, the role each plays, the license it is made available under, and where to obtain its source code. We do not list version numbers here: exact versions of the components running in your workspace are available on request (support@oneva.cloud).
Each Oneva workspace is a dedicated virtual machine running the following components.
| Component | License | Role in Oneva | Source |
|---|---|---|---|
| Nextcloud | AGPL-3.0-or-later | Files, dashboard and the core apps | GitHub |
| Nextcloud Talk | AGPL-3.0-or-later | Chat and video calls | GitHub |
| Talk signaling server (HPB) | AGPL-3.0 | Call signaling | GitHub |
| Janus | GPL-3.0 | WebRTC media gateway | GitHub |
| eturnal | Apache-2.0 | TURN/STUN server for calls | GitHub |
| Collabora Online (CODE) | MPL-2.0 | Browser-based document editing | GitHub |
| PostgreSQL | PostgreSQL License | Database | GitHub |
| pgvector | PostgreSQL License | Vector search in the database (used by Mimir) | GitHub |
| Redis | RSALv2 / SSPLv1 / AGPL-3.0 | Caching and file locking. Redis is offered under these licences at the user's choice. | GitHub |
| LLDAP | GPL-3.0 | Lightweight LDAP directory (one login for every app) | GitHub |
| docker-mailserver | MIT | Packaging of the mail server | GitHub |
| Postfix | IPL-1.0 / EPL-2.0 | Sending and receiving mail (SMTP) | GitHub |
| Dovecot | MIT / LGPL-2.1 | Mailboxes and IMAP | GitHub |
| Rspamd | Apache-2.0 | Spam filtering | GitHub |
| ClamAV | GPL-2.0 | Virus scanning of incoming mail | GitHub |
| imapsync | NLPL (No Limit) | Mail migration from your old provider | GitHub |
| Nginx | BSD-2-Clause | Web front end and reverse proxy | GitHub |
| Certbot | Apache-2.0 | Obtains and renews TLS certificates | GitHub |
| fail2ban | GPL-2.0+ | Brute-force protection | GitHub |
| UFW | GPL-3.0 | Firewall | Launchpad |
| restic | BSD-2-Clause | Encrypted backups | GitHub |
| Docker Engine | Apache-2.0 | Container runtime | GitHub |
| Playwright | Apache-2.0 | Browser automation for Mimir's web browsing | GitHub |
| Chromium | BSD-3-Clause and others | The browser Mimir drives | chromium.org |
| Ubuntu / Debian | GPL-2.0 (kernel) + various | Operating system | ubuntu.com |
The following Nextcloud applications are pre-installed in each workspace.
| App | License | Purpose |
|---|---|---|
| Calendar | AGPL-3.0 | CalDAV calendar |
| Contacts | AGPL-3.0 | CardDAV address book |
| Tasks | AGPL-3.0 | Task management |
| AGPL-3.0 | Integrated email client | |
| Deck | AGPL-3.0 | Kanban boards |
| Forms | AGPL-3.0 | Surveys and forms |
| Notes | AGPL-3.0 | Markdown notes |
| Collectives | AGPL-3.0 | Knowledge base / wiki |
| notify_push | AGPL-3.0 | Real-time push notifications |
The Oneva customer portal and automated provisioning system.
| Component | License | Role in Oneva | Source |
|---|---|---|---|
| Python | PSF License | Runtime | GitHub |
| FastAPI | MIT | Web framework | GitHub |
| SQLAlchemy | MIT | ORM | GitHub |
| Alembic | MIT | Database migrations | GitHub |
| ARQ | MIT | Background task queue | GitHub |
| Jinja2 | BSD-3-Clause | Template engine | GitHub |
| asyncssh | EPL-2.0 / GPL-2.0+ | SSH client for provisioning | GitHub |
| dnspython | ISC | DNS queries | GitHub |
| httpx | BSD-3-Clause | HTTP client | GitHub |
| Ansible | GPL-3.0 | Infrastructure automation | GitHub |
| Bootstrap | MIT | CSS framework (self-hosted) | GitHub |
In accordance with the GNU Affero General Public License (AGPL-3.0) and the GNU General Public License (GPL), users of the Oneva service have the right to receive the complete corresponding source code of all copyleft-licensed components running on their Oneva workspace, including any modifications we have made.
Where we run software without modifications, the source code is available from the upstream repositories linked in the tables above. If we have modified a copyleft-licensed component, you are entitled to that modified source; ask us and we will provide it.
Exact versions of the components running in your workspace are available on request.
You may also request source code by writing to support@oneva.cloud.
Oneva also relies on the following services, which are not open source. They are listed so this page does not overstate what is open:
Oneva's own software (the customer portal, the provisioning automation, the Mimir assistant and its Nextcloud app) is written by Oneva and is not covered by the licenses listed on this page. See the Privacy Policy for how customer data is handled.
"Nextcloud" is a registered trademark of Nextcloud GmbH. "Collabora" and "Collabora Online" are trademarks of Collabora Ltd. "LibreOffice" is a registered trademark of The Document Foundation. "Linux" is a registered trademark of Linus Torvalds. "Ubuntu" is a registered trademark of Canonical Ltd. "Docker" is a registered trademark of Docker, Inc. "PostgreSQL" is a registered trademark of the PostgreSQL Community Association of Canada. "Redis" is a registered trademark of Redis Ltd. All other trademarks are the property of their respective owners.
The use of these names on this page is for identification and attribution purposes only and does not imply endorsement or affiliation.
The open-source software components listed on this page are provided by their respective authors and contributors "as is", without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose, and non-infringement.
Oneva's own service commitments — including uptime, support, data handling, and security — are governed by the Oneva Terms of Service and Privacy Policy, and are separate from the warranties (or lack thereof) of the underlying open-source software.
If you have questions about the open-source software used in Oneva, our license compliance, or how to obtain source code, please contact support@oneva.cloud.
This page was last updated on 10 October 2026.