Tabadul connects Frappe to your own Nextcloud, and does two things with it.

Share files with people outside your organisation
• One link per recipient, not one link for everyone. Access is separable, and a forwarded link is traceable to whoever it was issued to.
• Every share needs a password, and it never travels with the link.
• Links expire on a date you set. An hourly job closes them and reconciles with Nextcloud.
• Revoke one person without disturbing anyone else.
• A share deleted directly in Nextcloud stops showing as active here.

Store document attachments on Nextcloud
• Opt-in per DocType. Nothing moves until you say so, and a site with no rules behaves exactly like one without the app.
• Path templates, so files land where a person would look for them.
• Per-company routing — each company to its own Nextcloud server.
• Private files never quietly fall back onto the ERP disk.
• Tools to migrate what is already there, with a dry run first.

Safe by default
• Downloads re-check permission on the attached document, not on the file record.
• The app password is encrypted and never reaches the browser.
• No core patching — only supported Frappe hooks, so an upgrade cannot break it.
• Arabic and English throughout.

What it does not claim
Nextcloud records share creation, deletion, service-account sign-in and download counts. It does not provide a per-recipient download log, and share-page views are not reliably tracked. The share log shows exactly what the platform captures, and nothing more.

Requirements
Frappe v15 or v16, a Nextcloud server, and a service account on it. ERPNext is needed only for per-company routing. MIT licensed.