5 ms·
Show HN: Omni – Open-source workplace search and chat, built on Postgres
Hey HN!
Over the past few months, I've been working on building Omni - a workplace search and chat platform that connects to apps like Google Drive/Gmail, Slack, Confluence, etc. Essentially an open-source alternative to Glean, fully self-hosted.
I noticed that some orgs find Glean to be expensive and not very extensible. I wanted to build something that small to mid-size teams could run themselves, so I decided to build it all on Postgres (ParadeDB to be precise) and pgvector. No Elasticsearch, or dedicated vector databases. I figured Postgres is more than capable of handling the level of scale required.
To bring up Omni on your own infra, all it takes is a single `docker compose up`, and some basic configuration to connect your apps and LLMs.
What it does:
- Syncs data from all connected apps and builds a BM25 index (ParadeDB) and HNSW vector index (pgvector)
- Hybrid search combines results from both
- Chat UI where the LLM has tools to search the index - not just basic RAG
- Traditional search UI
- Users bring their own LLM provider (OpenAI/Anthropic/Gemini)
- Connectors for Google Workspace, Slack, Confluence, Jira, HubSpot, and more
- Connector SDK to build your own custom connectors
Omni is in beta right now, and I'd love your feedback, especially on the following:
- Has anyone tried self-hosting workplace search and/or AI tools, and what was your experience like?
- Any concerns with the Postgres-only approach at larger scales?
Happy to answer any questions!
The code: https://github.com/getomnico/omni https://github.com/getomnico/omni (Apache 2.0 licensed)
- aitchnyu 7mo agoTangential, when you mentioned "Full-text (BM25) and semantic (pgvector) search", what are the significant benefits of the latter? I used to think of BM25 indexes as vectors of documents, which support search, "more like this" etc.
- andrewstuart 7mo agoWhen a product headlines what it’s built with, it’s does not bode well for customer success.
- STARGA 7mo ago[dead]
- shablulman 7mo ago[flagged]
- Doublon 7mo agoInteresting! I also started to build something similar for us, as an PoC/alternative to Glean. I'm curious how you handle data isolation, where each user has access to just the messages in their own Slack channels, or Jira tickets from only workspaces they have access to? Managing user mapping was also super painful in AWS Q for Business.
- prvnsmpth 7mo agoThank you! Currently permissions are handled in the app layer - it's simply a WHERE clause filter that restricts access to only those records that the user has read permissions for in the source. But I plan to upgrade this to use RLS in Postgres eventually. For Slack specifically, right now the connector only indexes public channels. For private channels, I'm still working on full permission inheritance - capturing all channel members, and giving them read permissions to messages indexed from that channel. It's a bit challenging because channel members can change over time, and you'll have to keep permissions updated in real-time.
- swaminarayan 7mo ago[flagged]
- prvnsmpth 7mo agoI've done small scale experiments with up to 100-500k rows, and did not notice any significant degradation in search query latency - p95 still well under 1s. I haven't directly compared against Elasticsearch yet, but I plan to do that next and publish some numbers. There's a benchmark harness setup already: https://github.com/getomnico/omni/tree/master/benchmarks https://github.com/getomnico/omni/tree/master/benchmarks, but there's a couple issues with it right now that I need to address first before I do a large scale run (the ParadeDB index settings need some tuning).
- cultofmetatron 7mo agowe have a pretty intensively used postgres backed app handling thousands of users concurrently. After 6 years and thousands of paying custoners, we are only now approaching to the limits of what it can support on the horizon. TLDR: when you get there, you can hire some people to help you break things off as needed. if you're still trying to prove your business model and carve yoruself a segment of the market, just use postgres
- prvnsmpth 7mo agoThanks for sharing! Big part of the reason why I decided on postgres, everything I've read about people using it in prod tells me that most organizations never really grow beyond requiring anything more than what it offers.
- hobs 7mo agoMost of the time just re-casting what you want in a horizontally shardable way is the "right" way to do it with any rdbms (if you scale) but at this point you can get boxes on AWS with 32TiB of ram, and most organizations don't have that much total data across their entire suite of stuff (many do, most don't.)
- 7mo ago
- deleted 7mo ago[deleted]
- vladdoster 7mo agoMultiple pages link to a `API Reference` that returns a 404
- prvnsmpth 7mo agoOops, sorry! That page is still a WIP, haven't pushed it yet. The plan was to expose the main search and chat APIs so that users can build integrations with third-party messaging apps (e.g. Slack), but haven't gotten around to properly documenting all the APIs yet.
- octoclaw 7mo ago[dead]
- keyle 7mo agoI've done some RAG using postgres and the vector db extension, look into it if you're doing that type of search; it's certainly simpler than bolting another solution for it.
- prvnsmpth 7mo agoYeah, Omni uses Postgres and pgvector for search. ParadeDB is essentially just Postgres with the pgsearch extension that brings in Tantivy, a full-text search engine (like Apache Lucene).
- andai 7mo agoNice! Could you elaborate on "not just a basic RAG"?
- prvnsmpth 7mo agoThank you! Typical RAG implementations I’ve seen take the user query and directly run it against the full-text search and embedding indexes. This produces sub-par results because the query embedding doesn’t really capture fully what the user is really looking for. A better solution is to send the user query to the LLM, and let it construct and run queries against the index via tool calling. Nothing too ground-breaking tbh, pretty much every AI search agent does this now. But it produces much better results.
- deleted 7mo ago[deleted]
- andai 7mo agoI call this ralphgrep
- Lapalux 7mo agoCan it connect to Teams?
- prvnsmpth 7mo agoNot yet, there’s a Microsoft connector implementation, but it only does Sharepoint, OneDrive, Outlook etc. and I haven’t tested it thoroughly yet. Teams required some special setup to work IIRC, so I skipped it. Will keep it on the roadmap though!
- patates 7mo agoTangeant: Why is integrating with teams SO difficult? I started parsing its system logs to create entries in our system automatically to book my times - just not todeal with their silly REST api requirements.
- acidburnNSA 7mo ago* "Self-hosted: Runs entirely on your infrastructure. No data leaves your network." * "Bring Your Own LLM: Anthropic, OpenAI, Gemini, or open-weight models via vLLM." With so many newbies wanting these kinds of services it might be worth adjusting the first bullet to say: "No data leaves your network, at least as long as you don't use any Anthropic, OpenAI, or Gemini models via the network of course"
- cjonas 7mo agoMost organizations are going to be self hosting on aws, gcp or azure... So as long as you use their inference services as your LLM then you can keep it all within the private network
- prvnsmpth 7mo agoExactly, enterprise customers almost always use private model endpoints on their cloud provider for any serious deployments. Data stays within the customer's VPC, data security and privacy is guaranteed by the cloud providers.
- acidburnNSA 7mo agoEven self-hosting on AWS, GCP, or Azure isn't local enough for certain application, such as people doing export-controlled work where any sysadmin or person with physical access to the server/data is required to be a US Person (or equivalent in other countries). This is the niche that the govcloud solutions are aimed at serving. But some people just want to build big actually-private, actually self-hosted systems and do their own physical and network security.
- whattheheckheck 7mo agoAWS Bedrock seems to say the inference code is only scanned for CASM and no one trains on your data.
- acidburnNSA 7mo ago
- jFriedensreich 7mo agoCan we please not change the meaning of chat to mean agent interface? It was painful to see crypto suddenly meaning token instead if cryptography. Plus i really dont want to “chat” with ai. its a textual interface
- prvnsmpth 7mo agoFair point, although I think we have OpenAI to blame for that - for buying chat.com and pointing it to the most popular textual AI interface of them all :)
- PhilippGille 7mo agoHow does it compare to Onyx (rebranded from Danswer, with more chat focus, while Danswer was more RAG focus on company docs/comms)? - https://onyx.app/ https://onyx.app/ - Their rebranded Onyx launch: https://news.ycombinator.com/item?id=46045987 https://news.ycombinator.com/item?id=46045987 - Their orignal Danswer launch: https://news.ycombinator.com/item?id=36667374 https://news.ycombinator.com/item?id=36667374
- prvnsmpth 7mo agoSo far both projects are quite similar… the only major difference being the search index. Onyx uses vespa.ai for BM25 and vector search, I decided to go down the Postgres-only route.
- octoclaw 7mo ago[dead]
- mickelsamuel 7mo ago[dead]
- ElasticBottle 7mo agois this AI?
- lacoolj 7mo agohas to be
- zaphoyd 7mo agoHow are you managing multiplayer and permissions? I see in the docs that you can add multiple users and that queries are filtered by the requesting user such that the user only sees what they have access to. The docs aren't particularly clear on how this is being accomplished. Does each user do their own auth and the ingest runs for each user using stored user creds, perhaps deduplicating the data in the index, but storing permissions metadata for query time filtering? Or is there a single "team" level integration credential that indexes everything in the workspace and separately builds a permissions model based on the ACLs from the source system API?
- prvnsmpth 7mo agoSo it depends on the app - e.g., Google has domain-wide delegation where the workspace admin can provide service account creds that allow us to impersonate all users in the workspace and index all their files/email. During indexing, we determine the users/groups who have permissions file and persist that in the db. (It's not perfect, because Google Drive permission model is a bit complex, but I'm working on it.) This model is much simpler than doing per-user OAuth. In general, the goal is to use an org-wide installation method wherever possible, and record the identify of the user we are impersonating when ingesting data in the ACL. There are some gaps in the permission-gathering step in some of the connectors, I'm still working on fixing those.
- raphaelmolly8 7mo ago[dead]
- philippemnoel 7mo ago(ParadeDB maintainer here). This is super cool. Congrats on the project, and I'm excited to see ParadeDB be used to power this kind of use case. If there's anything else you need to ship Omni, don't hesitate to reach out to me!
- prvnsmpth 7mo agoThanks Philippe! You guys have been super helpful on slack!
- philippemnoel 7mo agoAnytime! We have some vector search work coming in the next few weeks/months that I expect you'll find interesting. Stay tuned :)
- dmix 7mo agoThis is a good time to be offering hybrid search extensions. I just did that myself recently with pgvector for a documentation site. Does ParadeDB work with Render? They seem to have a whitelist of extensions https://render.com/docs/postgresql-extensions https://render.com/docs/postgresql-extensions
- philippemnoel 7mo agoWe just made a blueprint for it! https://github.com/paradedb/render-blueprint https://github.com/paradedb/render-blueprint One-click deploy with Render, and we're directly in contact with the core team to get it added to their official docs. I hear the PR is up internally :)
- dmix 7mo agoSweet, nice work
- JOHN34567 7mo ago[dead]
- cwoodyard 7mo ago[dead]