bin404

command module
v1.0.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Mar 4, 2024 License: GPL-3.0 Imports: 41 Imported by: 0

README

Bin404

Bin404 is a self-hosted file/media sharing website used for the Sokka project and available at bin.4-0-4.io.


Features

  • File sharing: Share files with others, with the option to set an expiration date, a deletion key, and a file access key.
  • Media sharing: Share images, videos, audio, and other media files.
  • Code sharing: Share code snippets with syntax highlighting and in-place editing.
  • Torrent download: Download files using web seeding.
  • API: Documented API with keys for restricting uploads.
  • Custom pages: Add custom pages to the site navigation.
  • Remote uploads: Enable remote uploads. ====== Self-hosted file/media sharing website.
Features
  • Display common filetypes (image, video, audio, markdown, pdf)
  • Display syntax-highlighted code with in-place editing
  • Documented API with keys for restricting uploads
  • Torrent download of files using web seeding
  • File expiry, deletion key, file access key, and random filename options

Getting started

Using Docker
  1. Create directories files and meta and run chown -R 65534:65534 meta && chown -R 65534:65534 files
  2. Create a config file (example provided in repo), we'll refer to it as bin404.conf in the following examples

Example running

docker run -p 8080:8080 -v /path/to/bin404-server.conf:/data/bin404-server.conf -v /path/to/meta:/data/meta -v /path/to/files:/data/files ghcr.io/d-a-s-h-o/bin404:latest -config /data/bin404-server.conf

Example with docker-compose

version: '2.2'
services:
  bin404-server:
    container_name: bin404-server
    image: ghcr.io/d-a-s-h-o/bin404:latest
    command: -config /data/bin404-server.conf
    volumes:
      - /path/to/files:/data/files
      - /path/to/meta:/data/meta
      - /path/to/bin404-server.conf:/data/bin404-server.conf
    network_mode: bridge
    ports:
      - "8080:8080"
    restart: unless-stopped

Ideally, you would use a reverse proxy such as nginx or caddy to handle TLS certificates.

Using a binary release
  1. Grab the latest binary from the releases, then run go install
  2. Run ./bin404 -config path/to/bin404-server.conf

Usage

Configuration

All configuration options are accepted either as arguments or can be placed in a file as such (see example file bin404-server.conf.example in repo):

bind = 127.0.0.1:8080
sitename = Bin404
maxsize = 4294967296
maxexpiry = 86400
# ... etc

...and then run ./bin404 -config path/to/bin404-server.conf

Options
Option Description
bind = 127.0.0.1:8080 what to bind to (default is 127.0.0.1:8080)
sitename = Bin404 the site name displayed on top (default is inferred from Host header)
siteurl = https://bin.4-0-4.io/ the site url (default is inferred from execution context)
selifpath = selif path relative to site base url (the "selif" in bin.4-0-4.io/selif/image.jpg) where files are accessed directly (default: selif)
maxsize = 4294967296 maximum upload file size in bytes (default 4GB)
maxexpiry = 86400 maximum expiration time in seconds (default is 0, which is no expiry)
allowhotlink = true Allow file hotlinking
contentsecuritypolicy = "..." Content-Security-Policy header for pages (default is "default-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; frame-ancestors 'self';")
filecontentsecuritypolicy = "..." Content-Security-Policy header for files (default is "default-src 'none'; img-src 'self'; object-src 'self'; media-src 'self'; style-src 'self' 'unsafe-inline'; frame-ancestors 'self';")
refererpolicy = "..." Referrer-Policy header for pages (default is "same-origin")
filereferrerpolicy = "..." Referrer-Policy header for files (default is "same-origin")
xframeoptions = "..." X-Frame-Options header (default is "SAMEORIGIN")
remoteuploads = true (optionally) enable remote uploads (/upload?url=https://...)
nologs = true (optionally) disable request logs in stdout
force-random-filename = true (optionally) force the use of random filenames
custompagespath = custom_pages/ (optionally) specify path to directory containing markdown pages (must end in .md) that will be added to the site navigation (this can be useful for providing contact/support information and so on). For example, custom_pages/My_Page.md will become My Page in the site navigation
Cleaning up expired files

When files expire, access is disabled immediately, but the files and metadata will persist on disk until someone attempts to access them. You can set the following option to run cleanup every few minutes. This can also be done using a separate utility found the bin404-cleanup directory.

Option Description
cleanup-every-minutes = 5 How often to clean up expired files in minutes (default is 0, which means files will be cleaned up as they are accessed)
Require API Keys for uploads
Option Description
authfile = path/to/authfile (optionally) require authorization for upload/delete by providing a newline-separated file of scrypted auth keys
remoteauthfile = path/to/remoteauthfile (optionally) require authorization for remote uploads by providing a newline-separated file of scrypted auth keys
basicauth = true (optionally) allow basic authorization to upload or paste files from browser when -authfile is enabled. When uploading, you will be prompted to enter a user and password - leave the user blank and use your auth key as the password

A helper utility bin404-genkey is provided which hashes keys to the format required in the auth files.

Storage backends

The following storage backends are available:

Name Notes Options
LocalFS Enabled by default, this backend uses the filesystem filespath = files/ -- Path to store uploads (default is files/)
metapath = meta/ -- Path to store information about uploads (default is meta/)
S3 Use with any S3-compatible provider.
This implementation will stream files through the Bin404 instance (every download will request and stream the file from the S3 bucket). File metadata will be stored as tags on the object in the bucket.

For high-traffic environments, one might consider using an external caching layer such as described in this article.
s3-endpoint = https://... -- S3 endpoint
s3-region = us-east-1 -- S3 region
s3-bucket = mybucket -- S3 bucket to use for files and metadata
s3-force-path-style = true (optional) -- force path-style addresing (e.g. https://s3.amazonaws.com/bin404/example.txt)

Environment variables to provide:
AWS_ACCESS_KEY_ID -- the S3 access key
AWS_SECRET_ACCESS_KEY -- the S3 secret key
AWS_SESSION_TOKEN (optional) -- the S3 session token
SSL with built-in server
Option Description
certfile = path/to/your.crt Path to the ssl certificate (required if you want to use the https server)
keyfile = path/to/your.key Path to the ssl key (required if you want to use the https server)
Use with http proxy
Option Description
realip = true let bin404-server know you (nginx, etc) are providing the X-Real-IP and/or X-Forwarded-For headers.
Use with fastcgi
Option Description
fastcgi = true serve through fastcgi

Deployment

bin404-server supports being deployed in a subdirectory (ie. example.com/bin404/) as well as on its own (bin404.com/).

1. Using fastcgi

A suggested deployment is running nginx in front of bin404-server serving through fastcgi. This allows you to have nginx handle the TLS termination for example.
An example configuration:

server {
    ...
    server_name bin404.example.org;
    ...
    
    client_max_body_size 4096M;
    location / {
        fastcgi_pass 127.0.0.1:8080;
        include fastcgi_params;
    }
}

And run bin404-server with the fastcgi = true option.

2. Using the built-in https server

Run bin404-server with the certfile = path/to/cert.file and keyfile = path/to/key.file options.

3. Using the built-in http server

Run bin404-server normally.

Development

  1. go get -u github.com/d-a-s-h-o/bin404
  2. cd $GOPATH/src/github.com/d-a-s-h-o/bin404
  3. go build && ./bin404

Documentation

The Go Gopher

There is no documentation for this package.

Directories

Path Synopsis
auth
s3

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL