K eltus
← All projects Case study

GoWeb

Real-time discussion forum with E2E-encrypted DMs, anonymous posting, and pluggable AI.

  • Signal-protocol E2E DMs
  • Anonymous posting via blind signatures
  • WebAuthn passkeys
  • Server-Sent Events real-time
  • Pluggable LLM tasks

GoWeb is a production-grade discussion platform built around three things forums usually have to hack together later: privacy, search, and AI. The backend is a stdlib Go JSON API (no server-side templating) hitting MariaDB as a single source of truth, with Meilisearch handling typo-tolerant search across forums, threads, and posts under admin-defined ranking.

Direct messages are genuinely end-to-end encrypted using the Signal protocol (libsignal-wasm), with multi-device linking via QR codes and per-group encryption for groups. Anonymous posting is real cryptographic anonymity — RFC 9474 RSA blind signatures let untrusted users prove a trust level without leaking identity. Authentication combines opaque session tokens (fast revocation, no blocklist needed) with TOTP 2FA and WebAuthn passkeys; passwords use Argon2id per current OWASP guidance.

The AI layer is deliberately model-agnostic. A pluggable LLMProvider interface lets Ollama (default), OpenAI-compatible HTTP endpoints, or OpenRouter all back the same set of admin- configurable named tasks (summarize_thread, classify_toxicity, translate, detect_duplicates). Native Ollama /api/chat integration controls thinking-mode behavior on reasoning models. Video transcoding, image OCR, and PDF processing run as background workers.