Documentation
Learn how to deploy, configure, and use Llamenos.
Guides
Getting Started
Prerequisites, installation, setup wizard, and your first deployment.
Self-Hosting Overview
Deploy on your own infrastructure with Docker Compose or Kubernetes.
Deploy: Docker Compose
Single-server self-hosted deployment with automatic HTTPS.
Deploy: Kubernetes (Helm)
Deploy to Kubernetes with the official Helm chart.
Deploy: Co-op Cloud
Deploy as a standardized recipe for cooperative hosting collectives.
Guides
Browse guides by audience and topic — operators, staff, and callers.
Telephony Providers
Compare supported telephony providers and choose the best fit for your hotline.
Setup: SMS
Enable inbound/outbound SMS messaging via your telephony provider.
Setup: WhatsApp
Connect WhatsApp Business via the Meta Cloud API.
Setup: Signal
Set up the Signal channel via the signal-cli bridge.
Setup: Twilio
Step-by-step guide to configure Twilio as your telephony provider.
Setup: SignalWire
Step-by-step guide to configure SignalWire as your telephony provider.
Setup: Vonage
Step-by-step guide to configure Vonage as your telephony provider.
Setup: Plivo
Step-by-step guide to configure Plivo as your telephony provider.
Setup: Asterisk (Self-Hosted)
Deploy Asterisk with the ARI bridge for maximum privacy and control.
WebRTC Browser Calling
Enable in-browser call answering for volunteers using WebRTC.
Security Model
Understand what's encrypted, what isn't, and the threat model.
Architecture overview
Llamenos is a self-hosted single-page application (SPA) deployed via Docker Compose or Kubernetes. It supports voice calls, SMS, WhatsApp, and Signal — all routed to on-shift staff through a unified interface.
| Component | Technology |
|---|---|
| Frontend | Vite + React + TanStack Router |
| Backend | Bun + Hono + PostgreSQL |
| Blob Storage | RustFS (S3-compatible) |
| Identity Provider | Authentik (self-hosted OIDC) |
| Voice | Twilio, SignalWire, Vonage, Plivo, or Asterisk |
| Messaging | SMS, WhatsApp Business, Signal |
| Auth | JWT + multi-factor KEK + WebAuthn passkeys |
| Encryption | ECIES (secp256k1 + XChaCha20-Poly1305), 3 tiers |
| Transcription | Client-side Whisper (WASM) — audio never leaves browser |
| Real-time | Nostr relay (strfry) |
| i18n | i18next (13 languages) |
Roles
| Role | Can see | Can do |
|---|---|---|
| Caller | Nothing (phone/SMS/WhatsApp/Signal) | Call or message the hotline |
| Volunteer | Own notes, assigned conversations | Answer calls, write notes, respond to messages |
| Reporter | Own reports only | Submit encrypted reports with file attachments |
| Admin | All notes, reports, conversations, audit logs | Manage volunteers, shifts, channels, bans, settings |