bigtech-sucks/packages/core/db/seed/0004-nextcloud-stack.sql
CLU f8f9756687 feat: the Nextcloud stack on the board, above everything else
Christian: 'Let's have every NextCloud thing come back as well-rated as it
should be. It's deserving of the same level of scrutiny everybody else is.'

Priority 20, above Slack and Kino, because this is the replacement we recommend
to clients. If we will not grade our own recommendation, nothing else we publish
is worth reading.

14 products: Server, Files, Talk, Mail, Calendar, Contacts, Photos, Notes, Deck,
Office, Passwords, the spreed signaling stack, and both migration bridges
(Dropbox, Google Drive). The migration apps matter most, because a migration
tool that does not work makes the off-ramp a slogan.

Nextcloud Server is the one to grade first. Every app score is conditioned on the
platform underneath it, so grading the apps before the server would be measuring
the second thing.

None of these has a score yet, and none will get one until it has evidence. The
recently-added attestation ladder and the reproducible-build cap both apply:
Nextcloud is open source but has no reproducible build practice yet, so
verifiability cannot exceed 3 on any of these today no matter how good the code
is.
2026-10-29 17:19:01 -05:00

78 lines
4.4 KiB
SQL

-- =====================================================================
-- 0004 — the Nextcloud stack, 2026-10-29
--
-- Christian: "We should prioritize running all those NextCloud applications
-- through the processor. Let's have every NextCloud thing come back as
-- well-rated as it should be. It's deserving of the same level of scrutiny
-- everybody else is."
--
-- Priority 20: above Slack and Kino, because this is the replacement we
-- recommend to clients. If we will not grade our own recommendation, nothing
-- else we publish is worth reading.
--
-- NOTE THE ASYMMETRY WE EXPECT AND MUST NOT DESIGN AROUND:
-- Nextcloud scores on a dimension Signal can never win, because there is no
-- third-party server to subpoena. It will also likely score worse than Signal
-- on verifiability and incident surface. "As well-rated as it should be" is the
-- instruction. Not "as well-rated as we hope."
-- =====================================================================
INSERT OR IGNORE INTO product
(id, vendor_id, name, category_id, platform, source_url, license,
sovereign, boss, art_slot, monthly_cost, priority, notes)
VALUES
('nextcloud-server', 'nextcloud-gmbh', 'Nextcloud Server', 'files', 'server',
'https://github.com/nextcloud/server', 'AGPL-3.0', 1, 0, NULL, 0, 20,
'The platform every other Nextcloud app sits on. Grade this first, because every app score is conditioned on it.'),
('nextcloud-files', 'nextcloud-gmbh', 'Nextcloud Files', 'files', 'web',
'https://github.com/nextcloud/server', 'AGPL-3.0', 1, 0, NULL, 0, 20,
'Replacement for Google Drive and Dropbox.'),
('nextcloud-talk', 'nextcloud-gmbh', 'Nextcloud Talk', 'messaging', 'web',
'https://github.com/nextcloud/spreed', 'AGPL-3.0', 1, 0, NULL, 0, 20,
'Replacement for Slack and Teams. Backed by the spreed signaling stack.'),
('nextcloud-mail', 'nextcloud-gmbh', 'Nextcloud Mail', 'email', 'web',
'https://github.com/nextcloud/mail', 'AGPL-3.0', 1, 0, NULL, 0, 20,
'Replacement for Gmail and Outlook.'),
('nextcloud-calendar', 'nextcloud-gmbh', 'Nextcloud Calendar', 'calendar', 'web',
'https://github.com/nextcloud/calendar', 'AGPL-3.0', 1, 0, NULL, 0, 20,
'Replacement for Google Calendar.'),
('nextcloud-contacts', 'nextcloud-gmbh', 'Nextcloud Contacts', 'calendar', 'web',
'https://github.com/nextcloud/contacts', 'AGPL-3.0', 1, 0, NULL, 0, 20,
'Replacement for Google Contacts and iCloud Contacts.'),
('nextcloud-photos', 'nextcloud-gmbh', 'Nextcloud Photos', 'photos', 'web',
'https://github.com/nextcloud/photos', 'AGPL-3.0', 1, 0, NULL, 0, 20,
'Replacement for Google Photos and iCloud Photos.'),
('nextcloud-notes', 'nextcloud-gmbh', 'Nextcloud Notes', 'notes', 'web',
'https://github.com/nextcloud/notes', 'AGPL-3.0', 1, 0, NULL, 0, 20,
'Replacement for Notion and Evernote for plain note capture.'),
('nextcloud-deck', 'nextcloud-gmbh', 'Nextcloud Deck', 'project', 'web',
'https://github.com/nextcloud/deck', 'AGPL-3.0', 1, 0, NULL, 0, 20,
'Replacement for Trello and Asana boards.'),
('nextcloud-office', 'nextcloud-gmbh', 'Nextcloud Office', 'productivity', 'web',
'https://github.com/nextcloud/richdocuments', 'AGPL-3.0', 1, 0, NULL, 0, 20,
'Collabora-backed document editing. Replacement for Google Workspace and Microsoft 365.'),
('nextcloud-passwords', 'nextcloud-gmbh', 'Nextcloud Passwords', 'passwords', 'web',
'https://github.com/nextcloud/passwords', 'AGPL-3.0', 1, 0, NULL, 0, 20,
'Replacement for LastPass and 1Password. Community app, not a core Nextcloud GmbH product.'),
('nextcloud-spreed-signaling', 'nextcloud-gmbh', 'Nextcloud Spreed Signaling (HPB)', 'messaging', 'server',
'https://github.com/strukturag/nextcloud-spreed-signaling', 'AGPL-3.0', 1, 0, NULL, 0, 20,
'The standalone high-performance backend for Talk. Appears in Mint Software Manager as nextcloud-speed-signaling, client and proxy. Written by Struktur AG.'),
('nextcloud-migrate-dropbox', 'nextcloud-gmbh', 'Nextcloud Dropbox Migration', 'files', 'web',
'https://github.com/nextcloud/migration', 'AGPL-3.0', 1, 0, NULL, 0, 20,
'The off-ramp bridge. Christian: "Then we can do the Dropbox app."'),
('nextcloud-migrate-gdrive', 'nextcloud-gmbh', 'Nextcloud Google Drive Migration', 'files', 'web',
'https://github.com/nextcloud/migration', 'AGPL-3.0', 1, 0, NULL, 0, 20,
'The off-ramp bridge. Christian: "and we can do the Google Drive app."');