Introduction

Data security has become a top priority for me—and likely for you, too. As a cloud enthusiast, I’ve always relied on file-sharing apps for their convenience: instant access to my data, anytime and anywhere. But convenience shouldn’t come at the cost of privacy or security.

A few years ago, I discovered and instantly adopted Tresorit, an app promising end-to-end encryption for all my files, seamlessly synced across my devices hoping for enhanced privacy and data security. Than I realised there is an even better solution. I started experimentations with self-hosted file-sharing platforms like Owncloud that gives you full control over your data, which is the foundational security and privacy measure. By hosting on your own infrastructure, you achieve data sovereignty, meaning your files and metadata are not subject to the policies of a third-party cloud provider. The more layers of protection, the better—because when it comes to safeguarding sensitive information, there’s no such thing as being too cautious.

If you’re like me—someone who values secure, cloud-based solutions but favours self-hosting over trusting third-party providers—then I’d like to introduce you to Veriqloud’s Qasmat.

Qasmat is a secure distributed storage system that leverages Shamir’s Secret Sharing to split files into encrypted fragments, distributing them across a network of servers. This approach guarantees both data availability and security, even if some servers are compromised or offline. And with the qasmat-swarm-deploy repository, deploying Qasmat using Docker Swarm and Ansible is simpler than ever.

In this post, I’ll walk you through how to set up your own secure storage system—so you can take control of your data without sacrificing accessibility or peace of mind.

Why Qasmat?

Qasmat’s swarm cluster based architecture

For testing purposes it is acceptable to create one docker-swarm manager node. In this tutorial, our docker swarm cluster has 4 additional worker nodes that run the containers of the application.

swarm-archi.png

Components of the application