Deployment

Up and running on hardware you already own.

A QNAP NAS, one forwarded port, a browser. Precise prerequisites, no slogans.

Server, step by step

Five steps, no command line.

  1. 01

    Install the package

    Install the NyxTalk package (.qpkg) in QTS App Center, on a QNAP NAS (x86_64) with Container Station. The package is provided with your demo.

  2. 02

    Open it and set it up in the browser

    Click “Open”: the first setup runs in your browser, without a command line. Choose your security level and create the owner account.

  3. 03

    Forward one port

    UDP 51823 to the NAS. That's the only port. The administration console (HTTPS 8790) stays on your local network and must never be forwarded.

  4. 04

    Invite users, enrol devices

    Email invitations through your SMTP, single-use enrolment links, approval with a 6-digit code.

  5. 05

    Update from the console

    Signed server and device updates, triggered from the console. Data is kept across updates and uninstallation.

Network

One port. Silent to strangers.

The NAS answers nothing that isn't authenticated: a scanner sees a closed door. Everything else — messaging, calls, updates — happens inside the encrypted application tunnel, in the office and remotely alike.

UDP 51823Forward to the NASThe only open port. Encrypted application tunnel.
HTTPS 8790Never forwardAdministration console, local network only.

Platforms and prerequisites

What runs where, today.

Server

QNAP NAS (x86_64, QTS with Container Station)

Native .qpkg package. Ubuntu (.deb): coming soon.

Network

One port to forward

UDP 51823 to the NAS. Console HTTPS 8790: local network only, never forwarded.

Windows

Windows 10 and 11 (64-bit)

Authenticode-signed executable. No administrator rights and no VPN driver needed; doesn't interfere with your corporate VPN.

macOS

macOS 12 or later

Apple silicon and Intel. Device key in the Secure Enclave.

Android

APK

Key in the Keystore (StrongBox/TEE) with Google attestation; YubiKey over NFC; no Google notifications, by choice.

iOS

Coming soon

App built and tested; distribution coming soon.

Security keys

YubiKey 5 (USB, NFC)

Or any certified FIDO2 key, depending on the level you choose. Two keys per person recommended (main + backup).

Enrolment

A device joins once, and only once.

  1. The administrator hands out a single-use link (valid 72 h by default) — by email or as a QR code in the console.
  2. The app creates the device key in the security chip; the manufacturer attests it.
  3. The device shows a 6-digit code; the administrator compares it out loud and approves.
  4. The person registers their security keys — two recommended, a main one and a backup.
Console: accepted authenticators per security level (French interface).

We'll help you set it up.

Request a demo: we'll check your NAS and network with you, then install NyxTalk on your infrastructure.

Request a demo How security works