enola-cli-lite
Your infrastructure.
Your rules.
No one watching.
enola-cli turns any Linux PC into your own corner of the internet: your website, your blog, your files. No rented servers, no open ports, no IP address to give you away.
The problem
The internet is no longer the public square it was. This isn't a feeling — it's the record.
Internet freedom has fallen for 15 straight years
In 2025 it got worse in 27 countries and better in only 17. The report covers 87% of the world's internet users.
Freedom House, 2025 (D1)
More than half of humanity lives without a free press
4.25 billion people in 42 "very serious" countries — for the first time, the global average is "difficult".
RSF, 2025 Index (D3)
Internet shutdowns are now a tool of government
Iran disconnected the internet in June 2025; Russia blocks websites by allow-listing; China blocks even Tor's bridges.
Tor Project / HRW, 2025 (D12)
Your ISP gave you a house with no doorbell
Major carriers put customers behind CGNAT: you can't open a single port. Publishing from home is impossible the classic way.
T-Mobile, Verizon, AT&T (D8)
Publishing costs money — or it costs your data
A rented server runs €4–6 a month, forever. "Free" hosting is paid for with your information and your audience in someone else's hands.
Everything you upload passes through a third party
Every photo, document or message you share lives on another company's computer, under another country's laws, readable by people you don't know.
It's not paranoia — It's documented
Humans were listening inside your home. Literally. Past tense, documented and admitted by the companies themselves.
Apple — Siri
Contractors heard "confidential medical information, drug deals, and recordings of couples". Apple suspended it after it broke — and in 2025 paid $95M to settle the class action.
The Guardian, 2019 · BBC, 2025 (D16)
Amazon — Alexa
Thousands of employees transcribed conversations: about 1,000 clips per shift, tagged with your name and account number.
CNBC / Bloomberg, 2019 (D17)
Google — Google Home
A contractor leaked over 1,000 recordings; 153 had been captured by accident, with no one saying "OK Google".
VRT NWS, 2019 (D17)
And the breaches
Google+ exposed data from up to 500,000 accounts and knew months before saying so. Amazon was fined €746M for processing data for ads without legal basis — upheld on appeal in 2025.
Google, 2018 · CNPD Luxembourg (D15)
The people who know best unplug the speakers
Switching off voice assistants during sensitive meetings is official policy in the UK government, the Irish parliament, an Indian ministry, and at law firms like Mishcon de Reya.
Why? Because the fear has a technical basis: smart speakers activate by mistake 1.5 to 19 times a day (PETS 2020 study); the CIA and MI5 built a tool that turns TVs into microphones (Weeping Angel, 2017); and Samsung's own privacy policy once warned customers not to discuss sensitive matters in front of their TV (2015).
Sources: UK/India governments, Irish parliament, Bloomberg, The Guardian, The Verge, Mon(IoT)r Lab (D23)
Your data has no border
The law that does reach you. "Server in Europe" protects nothing when the company is American: a safe in Madrid whose key is kept by a notary in Delaware.
The CLOUD Act (US, 2018)
Forces any company under US jurisdiction to hand over user data "regardless of where it is stored" — including data about non-Americans. This is their own law, not our interpretation.
18 U.S.C. §2713 · DOJ official FAQ (D13)
Europe's courts already said it
In 2020 the CJEU struck down the Privacy Shield (Schrems II): US surveillance doesn't provide protection equivalent to GDPR.
Court of Justice of the EU (D14)
And it has a price tag
Meta paid €1.2 billion — the largest GDPR fine in history — for continuing to send European data to the US.
Irish Data Protection Commission, 2023 (D14)
An example close to home: TaxDown
The Spanish tax-filing app runs on Amazon Web Services and its own privacy policy says "data may be transferred to the United States". Your tax data — pulled from the tax agency itself — under CLOUD Act reach. And if the US demands it, the law allows barring the company from telling you (gag orders, §2705(b)).
taxdown.es · help.taxdown.es · Cornell LII (D18)
TaxDown does nothing illegal. The problem is that whoever decides whether to hand it over is Amazon. Not TaxDown. Not you.
When the market rules
Platforms obey. A pattern documented with four facts, plus the home context.
In China, no court order is even needed
The 2017 Intelligence Law requires "all organizations and citizens" to cooperate with state intelligence. When Alibaba reported a critical vulnerability to the world before telling its government, Beijing suspended it for 6 months as a cybersecurity partner.
China Law Translate · BBC, 2021 (D19)
Google — Project Dragonfly (2018)
Secretly built a censored search engine for China.
The Intercept (D22)
Apple — HKmap (2019)
Pulled the Hong Kong protest mapping app one day after Communist Party press criticized it.
TechCrunch (D22)
Apple & Google — Navalny (2021)
Deleted the tactical voting app the same day Russian elections opened.
BBC (D22)
Meta — Vietnam (2020)
Vietnam took Facebook's servers offline for 7 weeks until the company agreed to censor more "anti-state" content.
Reuters via TechCrunch (D22)
And here at home: the "gag law"
Condemned by UN rapporteurs and Human Rights Watch for curbing expression and assembly.
LO 4/2015 · UN · HRW, 2015 (D20)
Over 75% of the audience, in few hands
TV, radio and press concentrated in few hands — that's the EU's media pluralism monitor talking, not an opinion.
Media Pluralism Monitor, MPM2025 (D21)
Interlude — Madrid's "plutonium briefcase"
It really happened in Madrid — twice: a stolen radioactive case abandoned next to a school in Leganés (2008) and on a street in Usera (2022). It wasn't plutonium: it was a low-category construction gauge. But the story people tell says "plutonium by a school" — and it rings true because Madrid has a real hidden nuclear past.
That's post-truth: a real event with the fear turned up. Which is why every claim in this presentation carries its source.
El País, RTVE, TeleMadrid, El Español, 20minutos, ABC (D24)
What enola-cli is
Your computer, your public square. No third party means nothing to seize.
Everything listens only inside your machine
No ports open to the internet, no IP address to geolocate.
The only door to the outside is an .onion address
A street that exists only inside the Tor network: a layer of the internet where servers have no visible physical address.
One command per service
No programming or server administration needed.
The analogy
Publishing on a host is renting a room in someone else's hotel — copied keys, staff walking in, an owner who can be ordered to evict you. enola is your own house, with an address that doesn't reveal where it stands.
No third party means nothing to seize.
Immediate honesty: it's your PC — when you switch it off, the service rests with you.
The promise
One PC. One command. Your internet.
0 open ports · 1 command per service · 0 companies in between
A single Linux computer, the one you already have
| Your website | ✔ |
| Your blog | ✔ |
| Your git | ✔ |
| Your files | ✔ |
| Your VPN | ✔ |
No hosting bill. No ports to scan. No company in between.
Who it's for
Ordinary people with ordinary reasons.
The student
"I want to show my app to the world without paying for a server or opening my parents' router."
The blogger
"I want to write without my name, my IP or my readers ending up in a platform's hands."
The journalist or activist
"I work with information someone would like to see disappear."
The lawyer or the doctor
"I need to get documents to my clients without routing them through a third company's servers."
The family
"House photos and files, reachable from outside, with no subscriptions and no one else's cloud."
The group of friends
"A game server that's ours, not rented."
Real case — Publishing without asking permission
Same mechanism, two urgencies: learning and informing.
The mechanism, plainly
Any app running on your PC — a project on port 3000, a static site — goes onto the Tor network as an .onion address with one command. It works even if your ISP won't let you open ports (CGNAT): .onion only uses outbound connections.
D8
For learners
7 million students use GitHub Education because real-world tools "can be cost-prohibitive". Here the cost is zero — and the Git is yours: enola deploys your own Forgejo, a private GitHub that doesn't depend on GitHub.
education.github.com (D10)
For writers
WordPress — the software that already runs 40% of all websites in the world — is one of the platforms enola publishes with one command. Blog, magazine or full site.
W3Techs, Oct 2026 (D5)
For those who inform
An .onion server has no public IP: there's no address to send a takedown order to, no hosting company to pressure. That's why SecureDrop — the open whistleblower submission system already used by over 70 news organizations worldwide — runs over the Tor network: "sources and journalists connect to SecureDrop using the Tor network", and its design "attempts to completely eliminate third parties from the equation". And why RSF recommends OnionShare to journalists under authoritarian regimes.
Freedom of the Press Foundation, 2021 · docs.securedrop.org (D6) · RSF (D7)
The door with a doorman
You can require an access key — client authorization — and your service becomes invisible to anyone without one: it won't even connect.
The context that makes it urgent: 67 journalists killed and 503 detained in twelve months.
RSF, 2025 (D2)
Honest small print: visitors need Tor Browser.
Real case — Sharing only with the people you choose
The folder only your people see
files publishes a folder from your PC as an .onion with autoindex — a browsable web listing — and a per-person key. Only invited guests connect; the invitation is revocable at any time. Versus Drive/Dropbox/WeTransfer: no copy on someone else's servers, no metadata in third-party hands — the same principle behind SecureDrop "eliminating third parties from the equation".
D6, D7
Your "NAS" is the PC you already own
House photos, documents and videos, reachable from outside with a key for each family member — and for phones or streaming, the built-in VPN (WireGuard) provides the fast lane. The home-NAS market bills ~$4.2B and grows at an annual rate of 8.5–11.8%, driven by privacy; enola covers the essentials with €0 of extra hardware.
Market estimates (D9)
Honest: it doesn't manage RAID disks or transcode video — it shares files, not miracles.
Gaming with friends
Your own server for turn-based or casual co-op games (Minecraft runs on TCP: playable with friends). Demand is massive — Aternos, the free Minecraft host, reports 125M users and 1M daily players on its official site.
aternos.gmbh (D11)
Honest: Tor only carries TCP and adds latency; for real-time there's the WireGuard VPN — same cost: zero.
What it can do
The toolbox, no fine print.
Web, static, files and TCP
WordPress, Drupal, Ghost, Magnolia, Strapi, Wagtail
SSH over Tor, no GitHub dependency
Per-person keys and TLS 1.3
Tunnels between trusted devices
UFW firewall + AppArmor
Verifiable offline
enola-cli docs — works with no internet
The honest comparison
What each does, costs and exposes:
| Option | Cost | Public IP visible? | Depend on a third party? |
|---|---|---|---|
| Rented VPS | ~€4–6/month | Yes, by design | Yes: the provider |
| "Free" hosting | Your data / ads | Yes | Total |
| OnionShare | €0 | No | No |
| Commercial NAS | Hardware + power | Depends | Yes (their cloud) or router |
| enola-cli | €0 | No — .onion only | No |
What it doesn't do
The fine print, in large type. This section earns credibility for all the others.
It's Tor: it's slow by design
Data takes six encrypted hops. Perfect for websites, blogs and files; not for heavy streaming or reflex gaming — that's what the built-in VPN is for.
TCP only
Real-time games running on UDP can't ride Tor. Turn-based or relaxed co-op → .onion; live competition → VPN.
Your visitors need Tor Browser
It's a free two-click app, but a real friction: this is not the tool for mass audiences or SEO.
Where Tor is blocked, this isn't enough
In China, Iran or Russia you need special bridges — and sometimes not even those work. A tool is no substitute for common sense or legal protection.
D12
It doesn't promise absolute anonymity
It promises privacy and censorship resistance by design; full safety also depends on your habits.
It's your PC
Switch it off and your corner of the internet sleeps with you. No datacenter keeps it standing for you.
Start today
Four steps.
Install
Step 1One script, one minute.
setup
Step 2Gets the system ready: Tor, Docker, firewall.
doctor
Step 3Checks everything is in order.
Publish
Step 4Your first .onion: a website, a folder, your project.
And verify before you trust: every release is dual-signed (minisign + post-quantum signature) and can be checked offline — enola-cli verify. You don't have to believe us: you can check it yourself.