Skip to content

Connect a self-hosted Graft server

Custom-server connections are a Spark feature in Eidos Lite on macOS, Windows, and Linux. Each computer uses its existing Spark activation; the server does not use a device seat. No official Sync subscription is required.

Android can connect to the same encrypted Spaces without an Eidos account or Spark activation. Computers using Lite still need Spark. Follow Connect on Android for the phone’s setup steps.

Use a Docker deployment, the personal Graft Cloudflare template, or a server compatible with its discovery and repository management API. Lite connects only to end-to-end encrypted repositories. A general Graft protocol endpoint does not necessarily provide the listing and creation APIs Lite needs.

  1. Activate Spark in Settings → Account & Services on this computer. If Spark is already active but the new feature is locked, choose Refresh Spark benefits.
  2. Complete Docker deployment or Cloudflare deployment and setup; keep the base HTTPS address and access key handy.
  3. Enable local version history if needed, and save the changes you want to upload.
  4. Open Settings → Account & Services → Sync → Add server. Enter a name, the Server address and Access token, then choose Test and save. Saving validates access and stores the configuration on this computer.
  5. Return to Sync and select the saved server under Server, or use Switch server for a connected Space. Set a sync password in Sync settings if needed, then choose Connect or review the switch. Wait for the encrypted upload and verification.

Selecting another cloud service or saving server settings keeps the existing connection active. Manage servers also lets you edit a name, replace an access token, or remove a saved configuration. Removing a configuration does not delete remote data. Add a separate server when changing the address.

The server access token authorizes access; the sync password decrypts your Space. They are separate secrets. Lite does not send the sync password to the server, or send your server token to the Eidos account service. HTTPS is required.

The personal template uses one token for all of its repositories and devices. Changing that token requires updating it on each connected device, but does not change your Space’s encryption password or identity.

Activate Spark on the other computer, then add the same server address and access token. Select the encrypted Space and choose Download. Enter the Space’s sync password, choose a new destination folder, and wait for the download to finish. Check a known record and attachment before editing.

Use the same review, upload, receive, and conflict-resolution steps in Everyday cloud sync and recovery. Each Space has one cloud connection at a time; different Spaces can use different servers.

  1. Open Sync → Custom server. Enter the server’s base HTTPS address, without a repository path, and its Server access key, then choose Browse server Spaces.
  2. Enter the Space sync password set when the Space was connected on your computer. Beside the encrypted Space, choose Download to this device. Keep the app open until the download finishes, then check a known record and attachment.
  3. Use Sync now to send and receive versions. Downloaded files remain usable offline, and the connection is retained across app restarts.
  4. To stop syncing this phone, choose Disconnect and confirm. Local files, version history and the server copy remain available.

The server access key authorizes access; the Space sync password decrypts the Space. Keep the password separately: an access key cannot replace it. Android encrypts saved access keys and sync passwords using Android Keystore, outside the Space and editor. Disconnecting clears that Space’s connection and credentials from the phone.

To send an unconnected local Space to a new encrypted repository, enter a new sync password and choose Enable sync for current Space, then Publish to an empty repository. Keep that password. Use Sync now when remote versions already exist.

Encrypted connections require HTTPS. HTTP is allowed only for loopback testing on the same device. Advanced: plain Graft repository is a separate connection for complete repository URLs; it cannot open encrypted desktop Spaces. Its HTTP option transfers files and access tokens without transport encryption.

In Lite, an existing Spark owner refreshes benefits once to receive this feature. The signed device license can then be verified offline, including after signing out of the Eidos account. Normal custom-server sync connects directly to your server. Releasing Spark on this computer stops further custom-server operations without deleting local files, history, or remote data. You can still disconnect.

To change the service used by a Space, keep a complete local copy and its history. Open Sync → Cloud sync → ⋯ → Switch server and select the target service. Configure the target service, select Review switch, and confirm the switch. Lite creates a new encrypted repository and uploads the saved history. Do not replace the old remote URL or copy encrypted server objects into a different repository. Download and check the new copy on another computer before deleting the old server copy. Other computers must connect to the new repository themselves. The current connection remains identified separately from the target. Canceling keeps it unchanged. If the upload fails, Lite restores the previous connection; you may need to unlock it if its password was not saved on this device. After an interrupted switch, reopen the Space to resume local connection recovery.

Your hosting provider’s storage and request limits apply. Official Sync account quotas and the Eidos account’s repository deletion page do not manage your custom server. Follow the server’s own operations guide and keep independent backups.

Sending changes, resolving conflicts, and password recovery.

Choose a sync method.