MiniMost Documentation
MiniMost is a lightweight, self-hosted chat platform built for private networks. It runs entirely on Python and SQLite — no external database, no root access, no infrastructure required. Just Flask and a browser.
Developer Reference
- Architecture
- High-Level Overview
- Application Factory
- Shared SQLite Model
- Message Propagation
- Read State (Watermark)
- Search
- Shared State: auth.db and presence.db
- Event Delivery Architecture
- Authentication Flow
- New User Registration Flow
- DM Channel Naming
- DM Visibility (dm_hidden)
- Avatar Storage
- Link Preview Pipeline
- Calling Architecture
- Frontend Architecture
- Security Architecture
- Module Dependency Graph
- HTTP API Reference
- Frontend Architecture
- Page Structure
- Client-side State
- Event Stream (chat-events.js)
- Message Rendering
- Text Formatting
- Keyboard Shortcuts
- Reactions
- Mentions
- Search
- Presence System
- Notifications
- File Upload
- Link Previews
- Avatar System
- Settings Modal
- DM Sidebar Close Button
- Private Channel Leave
- DM Modal
- Calling
- Mobile Support
- Security
- STIG Compliance
- Scope
- Control matrix
- Baseline protections
- Audit logging (APSC-DV-000340–000430, 000810–000900)
- Session inactivity timeout (APSC-DV-000070 / 000080)
- Security response headers (APSC-DV-002500)
- Generic error handlers (APSC-DV-002880 / 002890)
- Password policy hardening (APSC-DV-001940 family)
- Logoff confirmation (APSC-DV-000100)
- Session ID rotation on authentication (APSC-DV-002250)
- Environment and deployment controls
- References