Skip to content

README.md

Latest commit

 

History

History
93 lines (71 loc) · 5.09 KB

README.md

File metadata and controls

93 lines (71 loc) · 5.09 KB
Raw
android-chrome-512x512

Nonograph

Anonymous publishing for the privacy-conscious web.

Self-hosted anonymous publishing. No accounts, no tracking. Write, publish, share. Nothing else collected.

demo.mp4

Known Instances

Uptime Location Clearnet Onion
Website 🏴‍☠️ Unknown https://nonogra.ph http://ortmy3ey5usdzf4ivht6axtb72owjniaeqrexknosyons544aooltzyd.onion/
Website 🏴‍☠️ Unknown https://write.eversiege.network/ http://fmoigm7j3z6vh4hgssdfhlt6knkp443thgxpe5wmbaevvb5km2d3suyd.onion/
Website 🇫🇮 Finland https://proxy.write.daun.world/ see above
Onion 🇭🇺 Hungary http://t7fgh7qvjysh3wer747m6dkjvkjsqvajyv5bh2grzjgpd2derxsxbdad.onion/
Onion 🏴‍☠️ Unknown http://uawaa47jvsfr3ij63ns25xp6qvhqswsx3fgij2evbrcnt3ygxq3dbwyd.onion/
Onion 🇰🇿 Kazakhstan http://5mq3db45agipsceghnpx3iumlctya3absmp4sgnitqcmrmhaqhbbjcid.onion/

These instances are provided by third-parties, each with their own policies. Choose one that reflects your values, or self-host.

Deploy

mkdir -p ~/nonograph/content ~/nonograph/onion
sudo docker run -d \
  --name nonograph \
  -p 8009:8009 \
  -v ~/nonograph/content:/app/content \
  -v ~/nonograph/onion:/var/lib/tor/hidden_service \
  --restart unless-stopped \
  ghcr.io/du82/nonograph:latest

or grab the source code and make your own container:

git clone https://github.com/du82/nonograph
cd nonograph
make up

Then check logs for your .onion address:

docker logs nonograph

Hate Docker? Run ./run to build and run natively (Debian only).

Features

  • Markdown with tables, code blocks, footnotes, and #spoiler# syntax
  • Image and video embedding from URLs
  • No accounts, no IPs logged, no analytics
  • Tor hidden service out of the box
  • Runs on 64MB RAM. Fine on a Pi or cheap VPS

Requirements

  • Debian-based Linux (Raspberry Pi OS, KDE Neon, Pop_OS, etc. - not Ubuntu)
  • 64MB RAM, 64MB disk

Name

anonymous + monograph + telegraph = nonograph

Audits

  • 6/22/2026 - @SmokeCamel was reimbursed and provided isolated VMs for running top AI models against Nonograph's parser. No vulnerabilities were found.
  • 4/20/2026 - @h_2_o0 found a URL validation bypass on 4/20 (nice), fixed in this commit.
  • 10/15/2025 - Security Assessment Report Redacted.pdf - audit of the initial release (v0.0.1), paid for in Monero. Only the auditors name and email were redacted. Fixed in this and this commit.

License

Public domain (Unlicense). This software belongs to everyone. Use it, modify it, share it without restriction. No attribution required, no strings attached, no warranties provided.