The Spot · a self-hosted third space

── ·· ── ·· ── ·· ── presents ── ·· ── ·· ── ·· ──

thespot.chat · 2026

 ████████╗██╗  ██╗███████╗    ███████╗██████╗  ██████╗ ████████╗
 ╚══██╔══╝██║  ██║██╔════╝    ██╔════╝██╔══██╗██╔═══██╗╚══██╔══╝
    ██║   ███████║█████╗      ███████╗██████╔╝██║   ██║   ██║
    ██║   ██╔══██║██╔══╝      ╚════██║██╔═══╝ ██║   ██║   ██║
    ██║   ██║  ██║███████╗    ███████║██║     ╚██████╔╝   ██║
    ╚═╝   ╚═╝  ╚═╝╚══════╝    ╚══════╝╚═╝      ╚═════╝    ╚═╝

a self-hosted third space

What Is This

The Spot is a self-hosted hangout for you and your friends. Chat, voice, video, shared music, screenshare, games — all running on hardware you already own.

One binary. No cloud dependency. No telemetry. No ads.
Your server. Your rules.

Think of it as what Discord would be if a friend group built it for themselves instead of a corporation building it for investors.

Features

Chat

Text channels with threads, pins, reactions, and embeds

Voice

Live voice rooms via WebRTC & LiveKit SFU

Music

Shared DJ bot — !play, queue, volume, the works

Video

Screenshare + camera (coming soon)

Media

YouTube, Plex, Jellyfin, Twitch modules (coming)

Zero Deps

Single Go binary · SQLite · no Postgres · no Redis · no nginx

Quick Start

# grab it
git clone https://github.com/yourorg/thespot.git
cd thespot/server

# build it (Go 1.24+, libopus-dev, libopusfile-dev, libsoxr-dev)
make build

# init it (creates config, admin user, database)
./bin/spot init

# run it
./bin/spot serve
    

Open http://localhost:8080. Log in. You're live.

Docker Compose also available — one command dev mode with LiveKit included.

Status

What Works

Chat (messages, reactions, pins, embeds, history)
Auth (local accounts, OIDC/SSO, admin panel)
Voice rooms (via LiveKit)
Music bot (play, queue, volume, 20 commands)
External bot adapter

What's Coming

Video / screenshare
Module layout system
YouTube / Plex / Jellyfin modules
Custom RTC transport
Mobile layout

Security

▪ Secure cookies enforced under TLS
▪ Admin-only account creation — no open registration
▪ CSRF protection on all state-changing endpoints
▪ bcrypt cost 12 for password hashing
▪ Login rate limiting: per-IP and per-user
▪ Session tokens: crypto/rand, 32 bytes
▪ Embed fetcher with SSRF protection
▪ WebSocket rate limiting per-user per-action

the cloud is just someone else's computer

this one is yours

████████╗██╗  ██╗███████╗
╚══██╔══╝██║  ██║██╔════╝
   ██║   ███████║█████╗
   ██║   ██╔══██║██╔══╝
   ██║   ██║  ██║███████╗
   ╚═╝   ╚═╝  ╚═╝╚══════╝
███████╗██████╗  ██████╗ ████████╗
██╔════╝██╔══██╗██╔═══██╗╚══██╔══╝
███████╗██████╔╝██║   ██║   ██║
╚════██║██╔═══╝ ██║   ██║   ██║
███████║██║     ╚██████╔╝   ██║
╚══════╝╚═╝      ╚═════╝    ╚═╝

a self-hosted third space

// about

Self-hosted hangout for you and your friends. Chat, voice, video, shared music — on hardware you own. One binary. No cloud. No telemetry. No ads.

// features

Chat — threads, pins, reactions, embeds
Voice — WebRTC via LiveKit
Music — shared DJ bot (!play, queue, etc.)
Video — screenshare + camera (coming)
Media — YT, Plex, Jellyfin modules (coming)
Zero deps — Go binary, SQLite, done

// quick start

# grab, build, init, run git clone https://github.com/yourorg/thespot.git cd thespot/server make build ./bin/spot init ./bin/spot serve

Open localhost:8080. You're live.

// status

Chat, Auth, Voice, Music Bot

Video, Modules, Custom RTC, Mobile

// security

bcrypt-12 · CSRF · rate limiting · SSRF protection · secure cookies under TLS · no open registration

spot@local:~$ _