Deploy Now

Stars

993

Forks

42

Watchers

1

Developer links

Safebucket

By routing file transfers directly between client browsers and S3-compatible object storage through time-limited presigned URLs, Safebucket enables organizations to share large files and folders without bottlenecking their application server. Teams organize documents into logical buckets with nested folder hierarchies, preview images, videos, audio tracks, and PDFs inside a sandboxed browser viewer, or bundle up to one hundred selected items into a single client-side ZIP download. Public Quick Share links let external recipients download files or entire folders from a browser or via command-line curl redirects, while Reverse Share turns any shared folder into a secure dropbox where guests can upload files back under size and count quotas. Every shared link supports optional password protection, expiration dates, and maximum view limits, complemented by per-file expiration timers and a soft-delete trash bin with configurable retention. Two-tier role-based access control pairs platform roles (Admin, User, and Guest) with bucket-level permissions (Owner, Contributor, and Viewer), allowing teams to invite external collaborators via challenge-verified email links. Authentication integrates with OpenID Connect identity providers and LDAP or Active Directory servers alongside TOTP multi-factor authentication. Administrators gain a four-view governance console covering platform storage metrics, user and bucket inventories, and searchable audit trails filtered by action, user, and date range. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Safebucket
Safebucket
Safebucket
Safebucket
Safebucket
Safebucket

Benefits

  • Zero-Proxy Transfers via Presigned Storage URLs
  • Clients upload and download files directly to and from S3-compatible storage using signed URLs, keeping heavy file payloads off the API server and eliminating bandwidth bottlenecks.
  • Swappable Storage, Queue, and Cache Infrastructure
  • Plug in AWS S3, Google Cloud Storage, Azure Blob Storage, MinIO, or RustFS alongside PostgreSQL or SQLite, NATS JetStream or SQS, and Redis or Valkey.
  • Bi-Directional External Sharing without Guest Accounts
  • Generate password-protected Quick Share links with view limits and expiration dates, or enable Reverse Share on folders so external contacts can upload files under strict quotas.
  • Enterprise Identity and Searchable Audit Governance
  • Enforce OIDC single sign-on, LDAP directory login, TOTP multi-factor authentication, two-level RBAC, and real-time Loki or filesystem audit logs across every bucket action.

Features

  • Presigned Multipart File Transfers
  • Issues time-limited presigned PUT and GET URLs directly against AWS S3, GCS, Azure Blob, MinIO, RustFS, or generic S3 endpoints with drag-and-drop upload progress.
  • Quick Share and Reverse Share
  • Share individual files, folders, or buckets via public links with password protection, max view counts, CLI curl redirect support, and guest upload dropboxes.
  • Two-Level Role-Based Access Control
  • Combines platform-wide roles (Admin, User, Guest) with bucket-scoped roles (Owner, Contributor, Viewer) enforced at the Go API middleware layer on every request.
  • OIDC, LDAP, and TOTP MFA
  • Supports multiple concurrent OpenID Connect providers with domain restrictions, Active Directory LDAP bind, local external user accounts, and multi-device TOTP authentication.
  • Sandboxed Previews and Bulk ZIP
  • Renders images, video, audio, PDFs, and text inside an isolated browser sandbox and assembles multi-file and folder selections into a client-side ZIP archive.
  • Audit Trails and Lifecycle Trash
  • Tracks logins, uploads, downloads, and permission changes in searchable activity logs while enforcing per-file expiration dates and configurable trash retention policies.

Apps Similar to Safebucket