Damask

What it does

API access

Yeschecked 20 Sep 2026

Asset organization

It supports projects, folders, tags, custom metadata fields, and collections that can span projects.checked 12 Oct 2026

Asset processing

It supports image thumbnails and transforms, video and audio transcoding, PDF thumbnails, OCR, and background removal.checked 12 Oct 2026

Authentication and encryption

The README describes HMAC-SHA256 JWTs in httpOnly cookies with a seven-day expiry and AES-256-GCM encryption for ingress configuration.checked 12 Oct 2026

Deployment

Damask can be run as a Docker container or installed locally, and its README describes it as a single binary.checked 12 Oct 2026

Deployment limit

Damask is single-node only; the README warns that running multiple instances behind a load balancer is unsupported and can cause data corruption.checked 12 Oct 2026

Guest sharing

Yeschecked 20 Sep 2026

Ingress

Asset ingestion sources include IMAP, SFTP, WebDAV, S3-compatible storage, and an Email API, with a bundled SMTP server for email attachments.checked 12 Oct 2026

Integrations

The README lists OIDC, Google OAuth, Canva OAuth, Google Drive, Canva, and ImageRouter integrations.checked 12 Oct 2026

License

The public GitHub repository identifies its license as Apache-2.0.checked 12 Oct 2026

Media processing

It supports image and video/audio processing, PDF thumbnails, OCR text extraction with full-text search, and background removal through ImageRouter.checked 12 Oct 2026

Metadata and tagging

Yeschecked 20 Sep 2026

Notable limit

Damask supports single-node deployment only; running multiple instances behind a load balancer is unsupported and may cause data corruption.checked 12 Oct 2026

Observability

It supports OpenTelemetry tracing with an OTel-compatible backend.checked 12 Oct 2026

Product

Damask is a self-hosted digital asset manager for creative studios.checked 12 Oct 2026

Purpose

Damask describes itself as an automatable digital asset manager for creative studios.checked 12 Oct 2026

Search

It offers full-text OCR search and visual similarity search for images using perceptual hashing.checked 12 Oct 2026

Security

The README says authentication uses HMAC-SHA256 JWTs in httpOnly cookies with a seven-day expiry, and ingress configuration uses an AES-256-GCM key.checked 12 Oct 2026

Setup

The project recommends Docker and also documents local installation with Go, Node.js, and optional media-processing tools.checked 12 Oct 2026

Sharing

Share links can be password-protected or expire, and client review supports public comments without an account.checked 12 Oct 2026

Sharing and review

It provides password-protected and expiring share links, plus public client commenting without an account.checked 12 Oct 2026

Storage

The README lists local filesystem storage by default and SFTP or S3 as configurable storage backends.checked 12 Oct 2026

Supported asset types

images,video,audio,PDF,documentschecked 20 Sep 2026

Variants

Assets can have output variants for resizing, cropping, format conversion, background removal, or AI prompts, with draft previews and bulk workflows.checked 12 Oct 2026