Self-Hosted Secure Comms Stack for Activist Groups

For activist groups under 200 people, the standard stack is: Matrix Synapse for asynchronous group chat and one-to-one messaging, Jitsi Meet for video calls, an Etherpad or HedgeDoc instance for shared note-taking, and a Nextcloud for file sharing. All four run comfortably on a single 4 vCPU, 8 GB RAM Anubiz VPS for the small case, or split across two VPS as the group grows. Element (the Matrix client) handles E2EE on the client side, so the server sees only ciphertext for direct messages and encrypted rooms.

Synapse is the heaviest component. With 100 active users in 20 rooms, expect Synapse plus Postgres to consume 3-4 GB RAM steady state. Jitsi is light on RAM but spikes CPU during video calls - allocate 2 vCPU minimum if you expect simultaneous calls. Nextcloud and HedgeDoc are negligible. As the group grows past 500 users, move Synapse to its own VPS and keep the rest together. Hardware sizing matters because activist comms tend to spike during events - a poorly sized server fails when needed most.

Anubiz offshore VPS plans from $17.90/mo. Iceland and Romania are recommended for activist groups operating in liberal democracies where legal requests are slow but real. For groups operating under more aggressive surveillance, see /en/hosting-for-activist-matrix-relay. Crypto payment, no KYC. Internal links: /en/matrix-hosting, /en/anonymous-vps, /en/hosting-for-jitsi-meet-offshore.

The stack protects the contents of messages and reduces metadata exposure to third parties. It does not protect against compromised endpoints (a teammate's phone is the weakest link), does not protect against social engineering, and does not anonymize who talks to whom on the server side - the server sees connection metadata. For higher-threat groups, layer Tor or VPN access to the comms server on top.