Huddle

Self-hosted voice, video, and chat for small groups. Create a room, share a link, talk.

The server handles signaling and access control. Media and encrypted messages go peer-to-peer over WebRTC.

Features

• Voice and screen sharing
• End-to-end encrypted text chat and file sharing
• Invite links with optional room passwords
• Host controls (kick members)
• Proof-of-work on room create/join to slow down bots
• Single binary deployment

Quick start

Docker

cp .env.example .env
# set HUDDLE_INVITE_SECRET to a long random string
docker compose up -d --build

Open http://localhost:8080.

From source

Requires Go 1.26+, Node 20+, and pnpm 11+.

task run

For local development with hot reload:

task dev

Backend on :8080, frontend on :5173 (proxied to the API).

Configuration

Variable	Description
HUDDLE_INVITE_SECRET	Secret for signing invite tokens. Required in production.
HUDDLE_TRUST_PROXY	Trust X-Forwarded-* headers when behind a reverse proxy.
HUDDLE_CORS_ORIGINS	Comma-separated extra browser origins allowed for CORS and WebSocket upgrades.
HUDDLE_TURN_ENABLED	Enable the built-in UDP TURN relay.
HUDDLE_TURN_PUBLIC_ADDR	Public ip:port advertised for the built-in TURN relay. Required when TURN is enabled.
HUDDLE_PORT	Host port for Docker Compose.
HUDDLE_TURN_PORT	Host UDP port for Docker Compose TURN traffic.

Useful server flags:

Flag	Default	Description
-max-room-size	12	Max peers per room
-max-rooms	1000	Max active rooms
-invite-ttl	24h	Invite token lifetime
-pow-difficulty	0	Proof-of-work bits (0 disables)
-rate-limit-create	10	Room creates per IP per minute
-turn-listen-addr	:3478	Built-in TURN UDP listen address
-turn-credential-ttl	4h	Built-in TURN credential lifetime

Put TLS in front of the app in production. See deploy/reverse-proxy.conf.example.

Development

task test       # Go + frontend tests
task check      # format, lint, test, build
task security   # gosec, trivy, pnpm audit

License

Apache 2.0. See LICENSE.

Copyright 2026 Quad4.io.