mdump

A self-hosted, web-based markdown note-taking app. Notes are stored as plain .md files on disk — no database, no lock-in. Runs as a single Docker container.

Features

• WYSIWYG editor powered by Milkdown Crepe (ProseMirror + Remark)
• Flat-file storage — notes are standard .md files, editable by any text editor
• Multiple tabs with auto-save and dirty state tracking
• Full-text search across all notes
• Document outline panel — clickable h1–h6 heading list in the sidebar
• File attachments — upload images and files alongside notes
• Split editing — WYSIWYG, source, or side-by-side view
• Customisable toolbar — reorder, show/hide buttons
• Theming — 33 DaisyUI themes, custom editor fonts, font size, spacing
• HTTPS — native TLS support without a reverse proxy
• Single-user auth with bcrypt-hashed password

Quick Start

docker run -d \
  --name mdump \
  -p 8080:8080 \
  -e SESSION_SECRET=$(openssl rand -base64 32) \
  -v mdump-notes:/data/notes \
  -v mdump-config:/data/config \
  ghcr.io/troglobitten/mdump:main

Open http://localhost:8080 and create your account on first run.

Docker Compose

services:
  mdump:
    image: ghcr.io/troglobitten/mdump:main
    ports:
      - "8080:8080"
    volumes:
      - mdump-notes:/data/notes
      - mdump-config:/data/config
    environment:
      - SESSION_SECRET=your-secret-here
    restart: unless-stopped

volumes:
  mdump-notes:
  mdump-config:

Data

Notes and config are stored in two Docker volumes:

Volume	Container path	Contents
mdump-notes	/data/notes	Markdown files and attachments
mdump-config	/data/config	Settings, sessions, auth

Attachments live in hidden .{notename}/ folders alongside each note (e.g. meeting-notes.md → .meeting-notes/).

HTTPS / TLS

mdump supports native HTTPS without a reverse proxy. Set both variables to enable it:

Variable	Description
TLS_CERT	Path to the TLS certificate file (inside the container)
TLS_KEY	Path to the TLS private key file (inside the container)

    volumes:
      - /path/to/certs:/data/certs:ro
    environment:
      - TLS_CERT=/data/certs/cert.pem
      - TLS_KEY=/data/certs/key.pem

For a self-signed cert (local testing):

openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365 -nodes -subj '/CN=localhost'

Development

pnpm install
pnpm dev        # runs client (port 5173) and server (port 8080) concurrently

pnpm --filter client build   # production client build
pnpm --filter server build   # production server build

Tech Stack

• Backend: Node.js 20, Express 4, TypeScript
• Frontend: Vue 3 (Composition API), Vite, Tailwind CSS 3, DaisyUI 4
• Editor: Milkdown Crepe 7 (ProseMirror + Remark)
• Package manager: pnpm (monorepo)

Disclaimer

Built with the help of Claude (Anthropic). Use at your own risk.

License

MIT