Some users might want to host their own Threema Web instance. Here is a quick overview on how to achieve that.
The following components can be self-hosted:
- Threema Web
- SaltyRTC Server
- STUN / TURN Server
The push relay server could in theory be self-hosted too, but it won't help as the GCM / APNs API keys required to dispatch push notifications are not public.
If you have questions, please open an issue on Github.
Threema Web is a web application written in TypeScript with AngularJS 1. All that is required to host it is a web server that can deliver static content via https. We recommend using Nginx. Additionally, to build the release version yourself, a recent version of npm is required.
Note: The web server needs to set the proper MIME type for
(WebAssembly) files. When using Nginx, add the following line to the types in
If you're using Apache, add the following line to
AddType application/wasm .wasm
When using Python, something like this should work.
Building from source
You can get the source code from Github:
git clone https://github.com/threema-ch/threema-web.git
First, adjust the configuration in
- If you host your own SaltyRTC server, adjust the
- If you host your own STUN / TURN server, adjust the
Then, build the release version of Threema Web:
npm install --production npm run dist
Finally, unpack the
dist/threema-web-[VERSION].tar.gz archive to your web server directory.
Make sure to serve Threema Web only via https. We also recommend to enable
HSTS, HPKP, CSP and other available security mechanisms in your web server.
Downloading pre-built version
If you don't want to build Threema Web yourself, you can also download a
pre-built release with the
SELF_HOSTED variable set to
true, configured to use the Threema
Cryptographic signatures are provided for the downloads.
If you're interested in hosting Threema Web through Docker, check out the
docs/docker.md file for more information.
For instructions on how to run your own SaltyRTC server, see https://github.com/saltyrtc/saltyrtc-server-python
STUN / TURN Server
You can run any WebRTC-compliant STUN / TURN server, e.g. coturn.
While you could in theory host your own version of the push server, it won't help much since the GCM / APNs API Keys required to dispatch push notifications to the Threema app are not public.
You can review the code on Github though: https://github.com/threema-ch/push-relay