linx-server/README.md

211 lines
9.5 KiB
Markdown
Raw Normal View History

2015-09-29 05:46:50 +02:00
2020-03-13 02:34:08 +01:00
linx-server
2015-09-24 07:44:49 +02:00
======
2015-09-28 06:41:37 +02:00
[![Build Status](https://travis-ci.org/andreimarcu/linx-server.svg?branch=master)](https://travis-ci.org/andreimarcu/linx-server)
2015-10-16 01:33:38 +02:00
Self-hosted file/media sharing website.
2015-09-28 06:41:37 +02:00
2020-01-17 01:26:25 +01:00
### Demo
You can see what it looks like using the demo: [https://demo.linx-server.net/](https://demo.linx-server.net/)
2015-09-24 07:44:49 +02:00
2015-10-16 01:33:38 +02:00
### Features
- Display common filetypes (image, video, audio, markdown, pdf)
- Display syntax-highlighted code with in-place editing
2015-10-16 01:51:52 +02:00
- Documented API with keys if need to restrict uploads (can use [linx-client](https://github.com/andreimarcu/linx-client) for uploading through command-line)
2015-10-16 01:33:38 +02:00
- Torrent download of files using web seeding
2020-03-08 02:52:07 +01:00
- File expiry, deletion key, file access key, and random filename options
2015-10-16 01:33:38 +02:00
### Screenshots
2020-03-13 02:34:08 +01:00
<img width="730" src="https://user-images.githubusercontent.com/4650950/76579039-03c82680-6488-11ea-8e23-4c927386fbd9.png" />
2015-10-16 01:33:38 +02:00
2020-03-13 02:34:08 +01:00
<img width="180" src="https://user-images.githubusercontent.com/4650950/76578903-771d6880-6487-11ea-8baf-a4a23fef4d26.png" /> <img width="180" src="https://user-images.githubusercontent.com/4650950/76578910-7be21c80-6487-11ea-9a0a-587d59bc5f80.png" /> <img width="180" src="https://user-images.githubusercontent.com/4650950/76578908-7b498600-6487-11ea-8994-ee7b6eb9cdb1.png" /> <img width="180" src="https://user-images.githubusercontent.com/4650950/76578907-7b498600-6487-11ea-8941-8f582bf87fb0.png" />
2015-09-24 07:44:49 +02:00
2020-03-13 02:34:08 +01:00
Getting started
2015-09-29 05:46:50 +02:00
-------------------
2020-03-13 02:34:08 +01:00
#### Using Docker
Example running
```
docker run -p 8080:8080 -v /path/to/meta:/data/meta -v /path/to/files:/data/files andreimarcu/linx-server
```
Example with docker-compose
```
version: '2.2'
services:
linx-server:
container_name: linx-server
image: andreimarcu/linx-server
entrypoint: /usr/local/bin/linx-server -bind=0.0.0.0:8080 -filespath=/data/files/ -metapath=/data/meta/
command: -sitename=Linx -siteurl=https://linx.example.com
volumes:
- /path/to/files:/data/files
- /path/to/meta:/data/meta
network_mode: bridge
ports:
- "8080:8080"
restart: unless-stopped
```
Ideally, you would use a reverse proxy such as nginx or caddy to handle TLS certificates.
#### Using a binary release
2015-09-29 05:46:50 +02:00
1. Grab the latest binary from the [releases](https://github.com/andreimarcu/linx-server/releases)
2016-06-15 08:38:36 +02:00
2. Run ```./linx-server```
2015-10-16 01:33:38 +02:00
2020-03-13 02:34:08 +01:00
2015-09-29 05:46:50 +02:00
2015-10-16 01:33:38 +02:00
Usage
-----
2015-09-24 07:44:49 +02:00
#### Configuration
All configuration options are accepted either as arguments or can be placed in an ini-style file as such:
```ini
2016-06-15 08:38:36 +02:00
maxsize = 4294967296
allowhotlink = true
# etc
```
2020-03-13 02:34:08 +01:00
...and then invoke ```linx-server -config path/to/config.ini```
2016-06-15 08:38:36 +02:00
#### Options
2020-03-13 02:34:08 +01:00
|Option|Description
|------|-----------
| ```-bind 127.0.0.1:8080``` | what to bind to (default is 127.0.0.1:8080)
| ```-sitename myLinx``` | the site name displayed on top (default is inferred from Host header)
| ```-siteurl "https://mylinx.example.org/"``` | the site url (default is inferred from execution context)
| ```-selifpath "selif"``` | path relative to site base url (the "selif" in mylinx.example.org/selif/image.jpg) where files are accessed directly (default: selif)
| ```-maxsize 4294967296``` | maximum upload file size in bytes (default 4GB)
| ```-maxexpiry 86400``` | maximum expiration time in seconds (default is 0, which is no expiry)
| ```-allowhotlink``` | Allow file hotlinking
| ```-contentsecuritypolicy "..."``` | Content-Security-Policy header for pages (default is "default-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; frame-ancestors 'self';")
| ```-filecontentsecuritypolicy "..."``` | Content-Security-Policy header for files (default is "default-src 'none'; img-src 'self'; object-src 'self'; media-src 'self'; style-src 'self' 'unsafe-inline'; frame-ancestors 'self';")
| ```-refererpolicy "..."``` | Referrer-Policy header for pages (default is "same-origin")
| ```-filereferrerpolicy "..."``` | Referrer-Policy header for files (default is "same-origin")
| ```-xframeoptions "..." ``` | X-Frame-Options header (default is "SAMEORIGIN")
| ```-remoteuploads``` | (optionally) enable remote uploads (/upload?url=https://...)
| ```-nologs``` | (optionally) disable request logs in stdout
| ```-force-random-filename``` | (optionally) force the use of random filenames
| ```-custompagespath "custom_pages"``` | (optionally) specify path to directory containing markdown pages (must end in .md) that will be added to the site navigation (this can be useful for providing contact/support information and so on). For example, custom_pages/My_Page.md will become My Page in the site navigation
2019-03-14 18:58:17 +01:00
#### Require API Keys for uploads
2020-03-13 02:34:08 +01:00
|Option|Description
|------|-----------
| ```-authfile path/to/authfile``` | (optionally) require authorization for upload/delete by providing a newline-separated file of scrypted auth keys
| ```-remoteauthfile path/to/remoteauthfile``` | (optionally) require authorization for remote uploads by providing a newline-separated file of scrypted auth keys
| ```-basicauth``` | (optionally) allow basic authorization to upload or paste files from browser when `-authfile` is enabled. When uploading, you will be prompted to enter a user and password - leave the user blank and use your auth key as the password
2019-03-14 18:58:17 +01:00
A helper utility ```linx-genkey``` is provided which hashes keys to the format required in the auth files.
2019-01-25 08:39:17 +01:00
#### Storage backends
The following storage backends are available:
2019-01-25 09:20:52 +01:00
|Name|Notes|Options
|----|-----|-------
|LocalFS|Enabled by default, this backend uses the filesystem|```-filespath files/``` -- Path to store uploads (default is files/)<br />```-metapath meta/``` -- Path to store information about uploads (default is meta/)|
|S3|Use with any S3-compatible provider.<br> This implementation will stream files through the linx instance (every download will request and stream the file from the S3 bucket).<br><br>For high-traffic environments, one might consider using an external caching layer such as described [in this article](https://blog.sentry.io/2017/03/01/dodging-s3-downtime-with-nginx-and-haproxy.html).|```-s3-endpoint https://...``` -- S3 endpoint<br>```-s3-region us-east-1``` -- S3 region<br>```-s3-bucket mybucket``` -- S3 bucket to use for files and metadata<br>```-s3-force-path-style``` (optional) -- force path-style addresing (e.g. https://<span></span>s3.amazonaws.com/linx/example.txt)<br><br>Environment variables to provide:<br>```AWS_ACCESS_KEY_ID``` -- the S3 access key<br>```AWS_SECRET_ACCESS_KEY ``` -- the S3 secret key<br>```AWS_SESSION_TOKEN``` (optional) -- the S3 session token|
2019-01-25 08:39:17 +01:00
2015-10-16 01:33:38 +02:00
#### SSL with built-in server
2020-03-13 02:34:08 +01:00
|Option|Description
|------|-----------
| ```-certfile path/to/your.crt``` | Path to the ssl certificate (required if you want to use the https server)
| ```-keyfile path/to/your.key``` | Path to the ssl key (required if you want to use the https server)
2015-10-16 01:33:38 +02:00
#### Use with http proxy
2020-03-13 02:34:08 +01:00
|Option|Description
|------|-----------
| ```-realip``` | let linx-server know you (nginx, etc) are providing the X-Real-IP and/or X-Forwarded-For headers.
2015-10-16 01:33:38 +02:00
#### Use with fastcgi
2020-03-13 02:34:08 +01:00
|Option|Description
|------|-----------
| ```-fastcgi``` | serve through fastcgi
2015-10-16 01:33:38 +02:00
2015-10-30 23:36:47 +01:00
2017-05-05 06:43:52 +02:00
Cleaning up expired files
-------------------------
When files expire, access is disabled immediately, but the files and metadata
will persist on disk until someone attempts to access them. If you'd like to
automatically clean up files that have expired, you can use the included
`linx-cleanup` utility. To run it automatically, use a cronjob or similar type
of scheduled task.
You should be careful to ensure that only one instance of `linx-cleanup` runs at
2017-05-05 06:43:52 +02:00
a time to avoid unexpected behavior. It does not implement any type of locking.
2020-03-13 02:34:08 +01:00
|Option|Description
|------|-----------
| ```-filespath files/``` | Path to stored uploads (default is files/)
| ```-nologs``` | (optionally) disable deletion logs in stdout
| ```-metapath meta/``` | Path to stored information about uploads (default is meta/)
2017-05-05 06:43:52 +02:00
Deployment
----------
2015-10-30 23:36:47 +01:00
Linx-server supports being deployed in a subdirectory (ie. example.com/mylinx/) as well as on its own (example.com/).
2015-10-07 19:25:38 +02:00
#### 1. Using fastcgi
A suggested deployment is running nginx in front of linx-server serving through fastcgi.
This allows you to have nginx handle the TLS termination for example.
An example configuration:
```
server {
...
server_name yourlinx.example.org;
...
client_max_body_size 4096M;
location / {
fastcgi_pass 127.0.0.1:8080;
include fastcgi_params;
}
}
```
2015-10-07 19:25:38 +02:00
And run linx-server with the ```-fastcgi``` option.
#### 2. Using the built-in https server
Run linx-server with the ```-certfile path/to/cert.file``` and ```-keyfile path/to/key.file``` options.
#### 3. Using the built-in http server
Run linx-server normally.
2015-09-26 03:49:33 +02:00
Development
-----------
Any help is welcome, PRs will be reviewed and merged accordingly.
The official IRC channel is #linx on irc.oftc.net
2015-09-29 05:46:50 +02:00
1. ```go get -u github.com/andreimarcu/linx-server ```
2. ```cd $GOPATH/src/github.com/andreimarcu/linx-server ```
3. ```go build && ./linx-server```
2015-09-26 03:49:33 +02:00
2015-09-29 05:46:50 +02:00
License
-------
Copyright (C) 2015 Andrei Marcu
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
2015-09-24 07:44:49 +02:00
Author
-------
2015-09-28 06:41:37 +02:00
Andrei Marcu, http://andreim.net/