verdande

Self-hosted tasks, notes and projects, shared with the people you share the work with. One binary, SQLite inside it.

Built to be deployed as a Rune in Yggdrasil Panel — upload the manifest, fill in two fields, press start. It also runs anywhere Docker does.

As a Rune With Docker Source Documentation

One Go binary
SQLite inside it
amd64 and arm64
No account anywhere but yours
MIT

Add a task

file the VAT return next friday at 10am p1 #Accounts @tax

→ file the VAT return Fri 10:00 P1 Accounts tax

The same line works in Danish — betal moms på fredag kl 10 p1 #Firma @regnskab — and the two can be mixed mid-sentence.

What it looks like

The Today view: a sidebar of projects, filters and labels beside a list of tasks due today, each with its priority ring, time and labels. — Today. Dark is the default; there is a light theme too.

The Today view in the light theme: a sidebar of projects, filters and labels beside a list of tasks due today. — Today. Dark is the default; there is a light theme too.

A week in the calendar: timed tasks drawn to their length, a fifteen-minute stand-up short and a ninety-minute planning block tall, each on the day and at the time it is due. — The calendar draws a task to its length — drag its foot to change it.

Notes with a Shared with me group at the top of the list, holding a note somebody else shared, marked with whose it is, open on the right. — A note shared with you, gathered under Shared with me.

A project in board view: one column per section, with task cards showing due dates, labels, an arrow to whoever a task is delegated to, and a snoozed card greyed at the foot of its column. — Board view — one column per section. A delegated card carries an arrow to whoever has it; a snoozed one greys at the foot.

Notes: a list of notes on the left, one open on the right with headings, bullet lists, a quotation and a shell command in a code block. — Notes. Rich text on top, Markdown underneath.

Upcoming as a single week: seven columns of days, each holding the tasks due that day. — A week at a time — so a task can be dragged across a month boundary.

A task open in the detail drawer, with its description, priority, due date, labels, sub-tasks and an attached file. — A task, opened.

The settings page showing six themes as swatches and, below them, four looks written in the typeface each one selects. — Six themes and four looks: how bright, and how it reads.

Notes in the Charcoal theme: a warm near-black modelled on Apple Notes, the note list on the left and a note open on the right, with amber where the accent green usually is. — Charcoal — the newest theme, a warm near-black after Apple Notes, amber for the accent.

The instance-wide history page: who did what, in which project, filtered by person and event. — What has been done on the server, across every project.

Waiting on others: tasks that have been handed to somebody else, grouped under the person who has them, each row carrying an arrow to that person. — Waiting on others — grouped by who has it, each marked with an arrow to them.

A note with the source view open: the same note as Markdown, with headings, a list, a quotation, a wiki link and a fenced code block. — The same note as Markdown. What is on disk is what you see.

The integrations settings page: connecting Gmail with an OAuth client, and below it the calendar feed address. — Integrations: your mailbox, your calendar feed, your address.

Six themes, the same day

Three dark and three light — a property of the screen you are sitting at, a laptop in the sun and a monitor in a dark room wanting different answers. The typeface and how tight it sits are chosen apart from them.

The Today view in the Northern lights theme: dark, with a green accent. — Northern lights — dark, a green accent. The default.

The Today view in the Charcoal theme: a warm near-black modelled on Apple Notes, with amber for the accent. — Charcoal — a warm near-black after Apple Notes, amber accent.

The Today view in the Dusk theme: dark and warm, with an amber accent. — Dusk — dark and warm.

The Today view in the Daylight theme: light and coolly neutral. — Daylight — light and coolly neutral.

The Today view in the Paper theme: light and warm, like paper. — Paper — light and warm, like paper.

The Today view in the Contrast theme: black on white, for bright light. — Contrast — black on white, for bright light.

What it does

Doing the work

Reads what you type

Dates, times, priorities, projects, labels and repetition, parsed out of one line — in Danish and English, mixed freely.

Nothing to remember

Start typing anywhere and you are writing a task, with the letter you pressed already in the field. ⌘K goes anywhere else.

Search that reads Danish

Type gron and find grøn. Unicode does not consider ø an accented o, so a search that leans on that alone is broken for the people this was built for.

Repeats, and says so in words

Recurring tasks are RRULE underneath and "every other Tuesday" on the screen. Reminders are absolute or relative, and go out as Web Push to an iPhone or a Mac you have allowed them on.

Notes, beside the work

Rich text to write in, Markdown on disk — and a source view to see it. Images are pasted or dragged in. #project and [[another note]] are links, and a task shows what has been written about it. Archive what is done with it; the bin is for mistakes.

Share a note, or a page

Hand a single note to a person — to read or to edit — without standing up a project for it. Notes other people share with you gather under Shared with me, each marked with whose it is. File it in a project instead and everyone who can read the project reads the note.

How long it takes

A task can carry a length, and the calendar draws it to scale. Drag the foot of a task to make it longer or shorter, or drag its body to another day or time — the length comes along.

Waiting on others

What you have handed to somebody else, on its own page, grouped under the person who has it — and marked where you meet it too, with an arrow out of your hands, so a list reads at a glance as which tasks are yours and which you are waiting on.

Snooze it out of the way

Park a task to this evening, tomorrow, next week, or a moment you pick. It greys and sinks to the bottom of the list until then, and comes back by itself — without touching when it is actually due.

Holds through a drop

A tunnel, a lift, a base station handing over — the app does not go blank when the signal does. A save you make rides out a few seconds of no connection and goes through when it comes back, and a reload opens from what it last saw rather than the browser's offline page.

Connected to what you already use

Shared, properly

Owner, editor and viewer roles. People outside your instance join by invite link. Changes appear live.

A real CalDAV server

Two-way. Tick something off in Apple Reminders and it is ticked off here. Not a read-only feed pretending.

A calendar of its own

A month or a week of what is due, and a secret ICS address to subscribe to from Apple Calendar, Google or Thunderbird. A Google calendar can be laid over the top, read-only.

The Google half is written to Google's documentation and has not yet been run against Google. The feed and CalDAV have.

Your mail, as an inbox

Star a mail in Gmail, or flag one over IMAP in iCloud or Fastmail, and it becomes a task — and the star or flag comes off once it has, so a starred inbox empties as the tasks are made instead of only filling up. Forward one to your own address instead and the subject is parsed like anything else you type.

Claude, connected

A built-in MCP server. Ask what is due this week, or have a task added, in conversation.

AI only if you ask for it

Off by default, your own key, and your choice of Anthropic, OpenAI, Google or something local. Nothing leaves the server until you have filled that in, and everything works without it.

Yours, and checkable

More than one way in

Passkeys, or a password hashed with Argon2id and a second factor with recovery codes. Every device you are signed in on is listed, and any of them can be signed out from here.

Keys stay behind

Mail tokens, mailbox passwords, second-factor secrets and AI keys are encrypted in the database, and the key lives in a file beside it — not inside it. So a backup you download, or one that ends up somewhere it should not, does not open your mail.

Nobody signs themselves up

The first account is the administrator, and after that people arrive by invitation. An address on the internet is not an open door.

Who did what

Every change is written down — who moved it, who closed it, who let somebody in. Delete the account and the trail stays: it is the instance's record, not the person's.

Yours to leave

Import from Todoist, export back to it, take everything as JSON, or hand the notes a zip of Markdown and get the same zip back out. The round trip is tested, not promised.

It counts itself, out loud

Once a day an instance says it exists — a random id, the version, and nothing else. No tasks, no names, no addresses. It is on to begin with, the settings page prints the exact payload, and one switch stops it.

Lately

A landing page can say a project is alive; a list of what landed says it better. This is not a changelog — every release has notes, and they are on the releases page.

0.47 Click a picture in a note and it opens at full size, with a button that copies it to the clipboard. In the note it is scaled to the width of the column — a photo off a phone is four thousand pixels across — so what you were looking at was a thumbnail that did not look like one.
0.47 Search in ⌘K, pick a note, and the rest of the matches stay in the list beside it. They used to exist only in the popup you had just closed.
0.46 Share a project with somebody who already has an account by picking their name, rather than by spelling an email address you would have to know. Invitations that have not been taken up stay visible so they do not get sent twice, and can be withdrawn.
0.46 You are told when a project is shared with you, and there is a Leave the project button. Being let in without being asked, without being told, and with no way out was three things at once.
0.45 Search for a setting instead of remembering which tab it was under — in the settings themselves and in ⌘K. It knows them by what they do, so beacon finds the install count even though that is not its name.
0.45 Today's plan is a card on I dag rather than only a message in the morning that was gone if you did not read it at once. And a link can be told which browser to open in.
0.44 An optional AI layer, on your own key: it tidies the inbox, pulls the tasks out of a meeting note, writes a morning plan, turns "SV: SV: Vedr. levering uge 12" into what the mail actually asks for, and answers questions about your own notes with links to what the answer rests on. Every one of them is a line you accept, edit or refuse — it suggests, it never writes.
0.44 Administrators are told in the bell when a new version is out, once per version, and the message leads to the button that restarts.
0.43 Anything that can call a URL can put a task in your inbox — a shortcut on your phone, a script, a service. Notes can be handed to somebody who has no account yet, and writing @Sofie in a note shares it with her and tells her. Unread counts show on the app's icon in the Dock.
0.42 A sixth theme, Charcoal — a warm near-black after Apple Notes, with amber for the accent. And the app now holds through a short network drop: a save rides out a few seconds of no signal, and a reload opens from what it last saw rather than the browser's offline page.
0.42 A starred Gmail message loses its star once it has become a task, the way a flagged IMAP mail already did — so a starred inbox empties itself as the tasks are made instead of only filling up.
0.42 Notes read as three lines, the last one the project they are filed under; the calendar lightened to pastel days with today marked at the top; and two-factor set-up shows a QR code to scan.
0.41 A task you have delegated is marked where you meet it, not only on the "Waiting on others" page. A task can be snoozed to the bottom of the list until a moment you choose, and comes back by itself.
0.41 Web Push reminders reach an iPhone and a Mac again, and every dated task now shows up in a calendar you have subscribed to — not only the timed ones.
0.41 The calendar draws each task to its length: drag the foot to resize, or the body to move it. A single note can be shared with one person, and a [[note]] is a link you follow inline.

Running it

As a Rune in Yggdrasil Panel

This is what it was built for. Runes → Carve a rune, upload rune/verdande.yaml, create a server from it, set the public address and your mail server, and start it. No port forwarding — give it a subdomain and the panel routes it through your Cloudflare Tunnel.

Or with Docker, anywhere

Open the address afterwards and create the first account. That one is the administrator.

docker run -d --name verdande \
  -p 8080:8080 \
  -v verdande-data:/data \
  -e VERDANDE_BASE_URL=https://todo.example.dk \
  ghcr.io/kristianwind/verdande:latest

No database to provision — SQLite is inside the binary.
Distroless image: no shell, no package manager, one static file.
amd64 and arm64, so a Raspberry Pi is fine.
Nightly backups, fourteen kept, written with VACUUM INTO.
Twenty-four migrations, run on start. Upgrading is pulling the new image.

What it will not do

No karma, streaks or points.
No team workspaces — projects and the people in them are the whole model.
No native apps. It is a PWA, and it installs on a phone.
No Outlook or Exchange: Microsoft has closed IMAP to passwords and wants its own flow.
No languages beyond Danish and English.
No sync protocol of its own — CalDAV and the API are the sync.
No hosted version. There is nowhere to sign up, and that is the point.

At your own risk

verdande is MIT licensed and provided as is, without warranty of any kind. That sentence is in every MIT licence and it is usually skipped, so here it is in the open: if you run this, you run it at your own risk, and nobody is on the hook if it loses your work.

It is one person's project, at version 0.x, and 0.x means the shape can still change. You host it, so the data and the backups are yours. It writes a backup every night and keeps fourteen — and a backup nobody has ever restored is not yet a backup. Restore one before you need to.

Security is worked on rather than claimed. There have been two full reviews of the code, every finding is written down and closed, and what is protected and what is not is spelled out in SECURITY.md — including the parts that are a deliberate trade-off. Nobody outside the project has audited it. The last review found two ways to reach something you should not and closed both; a third review will find more, which is the point of having one.

It is built to sit behind something — a tunnel, a reverse proxy, a VPN — put there by somebody who knows what they exposed. Found a hole? Mail it rather than opening an issue; the address is in SECURITY.md and you get an answer within a week.