Oneva is built entirely on open-source software. This page lists every significant component in the Oneva platform, the license under which it is made available, and where to obtain source code. The only non-open-source dependencies are the infrastructure hosting services provided by Hetzner.
Each Oneva workspace is a dedicated virtual machine running the following open-source components.
| Component | License | Copyright / maintainer | Role in Oneva | Source |
|---|---|---|---|---|
| Nextcloud 33 | AGPL-3.0-or-later | Nextcloud GmbH & contributors | Files, dashboard, core apps | GitHub |
| Nextcloud Talk HPB | AGPL-3.0 | Nextcloud GmbH | Signaling server | GitHub |
| Collabora CODE | MPL-2.0 | Collabora Ltd | Browser-based document editing | GitHub |
| PostgreSQL 17 | PostgreSQL License | PostgreSQL Global Dev Group | Database | License |
| Redis 8 | BSD-3-Clause | Redis Ltd | Caching & file locking | GitHub |
| LLDAP | GPL-3.0 | LLDAP contributors | Lightweight LDAP directory | GitHub |
| docker-mailserver 15 | MIT | Docker Mailserver Organization | Email (Postfix + Dovecot + Rspamd) | GitHub |
| Janus | GPL-3.0 | Meetecho S.r.l. | WebRTC gateway | GitHub |
| eturnal | Apache-2.0 | ProcessOne, SARL | TURN/STUN server | GitHub |
| Docker | Apache-2.0 | Docker, Inc. | Container runtime | GitHub |
| ClamAV | GPL-2.0 | Cisco Systems, Inc. | Antivirus scanning | GitHub |
| imapsync | NLPL (No Limit) | Gilles Lamiral | Email migration | GitHub |
| Nginx | BSD-2-Clause | Nginx, Inc. (F5) | Reverse proxy | GitHub |
| Let's Encrypt / Certbot | Apache-2.0 | Electronic Frontier Foundation | TLS certificates | GitHub |
| fail2ban | GPL-2.0+ | fail2ban contributors | Brute force protection | GitHub |
| UFW | GPL-3.0 | Canonical Ltd | Firewall | Launchpad |
| restic | BSD-2-Clause | Alexander Neumann & contributors | Encrypted backup | GitHub |
| Ubuntu / Debian | GPL-2.0 (kernel) + various | Canonical Ltd / Debian Project | Operating system | ubuntu.com |
The following Nextcloud applications are pre-installed in each workspace.
| App | License | Purpose |
|---|---|---|
| Calendar | AGPL-3.0 | CalDAV calendar |
| Contacts | AGPL-3.0 | CardDAV address book |
| Tasks | AGPL-3.0 | Task management |
| AGPL-3.0 | Integrated email client | |
| Deck | AGPL-3.0 | Kanban boards |
| Forms | AGPL-3.0 | Surveys and forms |
| Notes | AGPL-3.0 | Markdown notes |
| Collectives | AGPL-3.0 | Knowledge base / wiki |
| notify_push | AGPL-3.0 | Real-time push notifications |
The Oneva customer portal and automated provisioning system.
| Component | License | Copyright / maintainer | Role | Source |
|---|---|---|---|---|
| Python 3.12 | PSF License | Python Software Foundation | Runtime | GitHub |
| FastAPI | MIT | Sebastián Ramírez | Web framework | GitHub |
| SQLAlchemy | MIT | Michael Bayer & contributors | ORM | GitHub |
| Alembic | MIT | Michael Bayer | Database migrations | GitHub |
| ARQ | MIT | Samuel Colvin | Background task queue | GitHub |
| Jinja2 | BSD-3-Clause | Pallets Projects | Template engine | GitHub |
| asyncssh | EPL-2.0 / GPL-2.0+ | Ron Frederick | SSH client for provisioning | GitHub |
| dnspython | ISC | Bob Halley & contributors | DNS queries | GitHub |
| httpx | BSD-3-Clause | Encode | HTTP client | GitHub |
| Ansible | GPL-3.0 | Red Hat, Inc. | Infrastructure automation | GitHub |
| Bootstrap | MIT | The Bootstrap Authors | CSS framework (self-hosted) | GitHub |
In accordance with the GNU Affero General Public License (AGPL-3.0) and the GNU General Public License (GPL), users of the Oneva service have the right to receive the complete corresponding source code of all copyleft-licensed components running on their Oneva workspace, including any modifications we have made.
Where we run software without modifications, the source code is available from the upstream repositories linked in the tables above. If we have made modifications to any copyleft-licensed component, the modified source code is published at github.com/oneva-cloud.
You may also request source code by writing to support@oneva.cloud.
All software deployed by Oneva is open source. The only proprietary dependencies are the infrastructure hosting services provided by Hetzner Online GmbH (Gunzenhausen, Germany), which we use for virtual machines, DNS, S3-compatible object storage, and firewalls via their Cloud API. Hetzner is a hosting service provider — it is not software that we deploy or distribute to our users.
This is consistent with our commitment that the Oneva platform runs on 100% open-source software.
"Nextcloud" is a registered trademark of Nextcloud GmbH. "Collabora" and "Collabora Online" are trademarks of Collabora Ltd. "LibreOffice" is a registered trademark of The Document Foundation. "Linux" is a registered trademark of Linus Torvalds. "Ubuntu" is a registered trademark of Canonical Ltd. "Docker" is a registered trademark of Docker, Inc. "PostgreSQL" is a registered trademark of the PostgreSQL Community Association of Canada. "Redis" is a registered trademark of Redis Ltd. All other trademarks are the property of their respective owners.
The use of these names on this page is for identification and attribution purposes only and does not imply endorsement or affiliation.
The open-source software components listed on this page are provided by their respective authors and contributors "as is", without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose, and non-infringement.
Oneva's own service commitments — including uptime, support, data handling, and security — are governed by the Oneva Terms of Service and Privacy Policy, and are separate from the warranties (or lack thereof) of the underlying open-source software.
If you have questions about the open-source software used in Oneva, our license compliance, or how to obtain source code, please contact support@oneva.cloud.
This page was last updated on 5 April 2026.