MarkHavenYour web, kept private

Private bookmark infrastructure

Take your browser
back into your hands.

One private home for bookmarks, Collections, and Tab Groups. Run it in Docker, connect Edge and Chrome, and decide exactly where your browsing library lives.

View on GitHub ↗See what's inside

Current projectv0.33.6 Docker Edge + Chrome

markhaven / get-started

Self-hosted onboarding

Runs withDocker

BrowsersEdge + Chrome

DatabaseSQLite / PostgreSQL

IdentityLocal / Microsoft 365

Inside MarkHaven

More than a bookmark list.

Every part is designed as one connected private library, from the right-click save action to server-side administration and recovery.

Bookmarks

Capture pages, links, or every open tab with duplicate protection and bulk organization.

Nested folders

Build a real hierarchy, preserve imported structures, and synchronize folder order.

Automatic filing

Route YouTube, GitHub, Docker Hub, or any configured domain to the right folder.

Collections

Keep durable research and project sets independent from the bookmark library.

Tab Groups

Save colour-coded browser sessions, synchronize them, and reopen selected groups.

Cross-browser sync

Keep Edge and Chrome aligned through one private account on your server.

Identity controls

Local accounts, invitations, device pairing, TOTP MFA, and Microsoft 365 SSO.

Backup & recovery

Encrypted ZIP backups locally or in OneDrive, with validation before restore.

MarkHaven · browser onboarding

MarkHaven get started page showing browser installation and pairing

The browser extension

Always close.
Never in the way.

MarkHaven lives in the browser side panel, giving daily tools enough room while the page you are browsing remains visible.

Capture from anywhere

Use the star, side panel, or right-click menu for a page, link, or every open tab.

Organize without leaving the page

Search, star, move, bulk-select, file, and restore directly in the panel.

Connect without sharing a password

Approve each browser with an expiring pairing code and revoke it later from Devices.

MarkHaven extension showing nested bookmark folders

Local vault ready

Edge + Chrome

Docker architecture

Clear parts.
One private system.

Start simply with one application and SQLite, or connect PostgreSQL and Microsoft services as the deployment grows.

Browser layer

Edge extensionSide panel + browser APIs

Chrome extensionSide panel + browser APIs

HTTPS→Pair · Sync · Manage

MarkHaven container

MarkHaven serverAPI · Web dashboard · Extension package

AccountsSync engineAdminBackups

EF Core→Validated persistence

Data layer

SQLiteSimple single-container start

PostgreSQLLocal or external server

Optional integrations

Microsoft Entra IDSSO

Microsoft GraphInvitation email

OneDriveEncrypted backups

SMTPFlexible delivery

What the image delivers

One image.
A complete product surface.

The MarkHaven container is more than an API. It carries the user experience, administration, onboarding, extension delivery, health checks, and recovery tools needed to operate it.

Review the repository ↗

Web dashboard

Bookmarks, folders, Collections, Tab Groups, devices, activity, and personal security.

Administration

Server address, invitations, identity, email delivery, backups, accounts, and maintenance.

Extension delivery

A server-bound ZIP, browser instructions, version checks, and secure device pairing.

Operational safety

Health endpoints, database migrations, backup validation, safe pruning, and restore previews.

Deployment building blocks

Choose the stack that fits.

Compose files layer together deliberately, keeping the base reusable while database and image choices remain explicit.

01compose.yml

Core application

The shared MarkHaven service, volumes, health checks, and runtime settings.

02compose.ghcr.yml

Published image

Uses the versioned MarkHaven image from GitHub Container Registry.

03compose.postgres.yml

Local PostgreSQL

Adds a managed PostgreSQL container beside MarkHaven.

04compose.postgres-external.yml

External PostgreSQL

Connects MarkHaven to an independently managed database server.

Control is a feature

Private does not mean isolated.

Invite separate users, synchronize multiple browsers, use Microsoft 365 SSO, require TOTP, manage connected devices, and send encrypted backups to OneDrive—without turning the data layer over to a browser vendor.

Account isolationDevice revocationTOTP MFASSO-readyEncrypted backups

Build your own haven

Your browser library.
Your server.

Explore the source, deployment documentation, extension, and current release on GitHub.

Open MarkHaven on GitHub ↗Back to MGET