Turn any server into a high-speed media vault and file-sharing hub with Chibisafe, a self-hosted upload platform built for chunked large-file transfers, organized albums, and instant desktop screenshot workflows. Users drag and drop photos, videos, archives, or documents into the browser uploader, where multi-gigabyte files are automatically split into chunks to prevent network drops from ruining an active transfer. Uploaded media renders inside a responsive masonry or list gallery with in-browser video and audio previews, custom file tags, search filtering, and one-click shareable links. Organizers group related uploads into folders and public albums, mark sensitive collections with content warnings before loading, and publish syntax-highlighted text snippets or code gists alongside shortened URLs. Desktop and mobile power users connect ShareX, iOS Shortcuts, macOS quick actions, fswatch folder monitors, or the companion browser extension using personal API keys that route captures straight into designated albums. Instance administrators toggle between public, open-registration, and invite-only modes, enforce per-user storage quotas, offload storage to AWS S3, Backblaze B2, MinIO, or Wasabi via signed URLs, and customize rate limits or allowed extensions directly from the web settings panel. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

A video too large for Discord, a secret that should not live in a chat log, or a config file a headless server needs to fetch: MicroBin turns each into a short link with an animal name, served from your own machine. Paste text or code and it comes back with syntax highlighting, inline image and video embedding, and a QR code for moving it to a phone. Attach one file or several, then decide exactly who can see them: uploads can be public or private, editable or locked, set to expire on a schedule or to never expire. For sensitive material, server-side encryption and client-side end-to-end encryption keep contents unreadable without the password. Raw serving hands the plain bytes to curl, a browser, or another program, which makes the same box a tiny file endpoint for scripts and test rigs. A postbox mode lets people send you files and texts they cannot browse or delete afterwards, and a read-only mode with an uploader password turns the instance into a drop point with exactly one trusted sender. The admin console lists uploads and storage, and everything runs as one small binary backed by SQLite or a JSON file, comfortable in a few megabytes of memory. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Pingvin Share X is your own WeTransfer, running on your server, with none of the transfer limits or expiring-link anxiety of the free tiers. Drop in a file of any size, get a link, and decide exactly how it behaves: an expiration date after which it vanishes, a password gate, a cap on how many visitors may open it, or all three. Email the link straight to recipients from the share dialog, and get notified when they download. Reverse shares flip the flow around: send someone a link and they upload files to you through it, which is perfect for collecting client deliverables, application documents, or the family photo archive without a single email attachment thread. Attachments can be scanned with ClamAV before anyone touches them, and storage lives on your disks or in S3-compatible buckets. Accounts connect through OIDC or LDAP single sign-on for teams, and an extensive admin panel tunes everything from password policy to upload chunk sizes. Registration rules decide whether your instance is a private family tool or an open drop point for your whole crew. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-2-Clause licensed.

Upload files, get a share link, let it expire: PsiTransfer is a self-hosted WeTransfer with no accounts, no logins, and no third-party cloud with size caps and metadata harvesting. The engineering focus is large files over imperfect networks. Uploads use the tus.io resumable protocol, so a dropped connection on a multi-gigabyte video resumes exactly where it stopped once you're back online; downloads support HTTP range headers for the same resilience, and everything streams, so file size is bounded by your disk rather than memory. Files organize into upload buckets with retention you control: expire after a set time (up to weeks) or after a one-time download, with automatic cleanup when links lapse. Recipients need nothing installed - they open the link, preview files in modal views, and grab everything as a zip or tar.gz archive with one click. Buckets can be password-protected (AES-encrypted download lists), and security-through-obscurity is done properly: bucket URLs use hashed UUID tokens and stored filenames are replaced with UUIDs. An optional admin page (enabled by setting an admin password) lists bucket information and storage. The Vue.js frontend ships under 100 KB gzipped and is fully responsive. Honest caveat from the author: no end-to-end payload encryption yet. BSD-licensed, Docker-ready.

Upload a file, get a unique download link and a separate delete link - Jirafeau has done exactly this one thing since 2008. It is plain PHP with no database, no mail server, no JavaScript framework, and no external dependencies - files and metadata live on the filesystem, which is why it runs on nearly anything and why it has outlasted most of its imitators. Uploads use the HTML5 file API, so PHP's post_max_size ceiling does not constrain file size, with live progress showing speed, percentage, and time remaining. Every upload takes options: expiration from one minute to a year to unlimited, self-destruct after first download, and password protection with configurable policy - passwords can be optional, required, or server-generated with complexity rules. Server-side encryption (modern builds use XChaCha20-Poly1305) stores files encrypted at rest with the decrypt key embedded only in the download URL, never on the server, so a compromised host cannot read the contents. Unencrypted deployments get file-level deduplication - identical files stored once with multiple links. Upload access can be gated by password lists or IP allowlists, a small admin panel manages stored files, and a CLI cleanup script handles expired files via cron. Recipients can preview supported files in-browser.

Plik lets you send big files the way WeTransfer does, except the server is yours: upload from the browser or one CLI command and get an expiring link to share. Files can delete themselves after the first download, stream straight from uploader to downloader without touching disk, or sit behind a password until their TTL runs out and cleanup removes them. End-to-end encryption with Age works between the CLI and the web interface, so the server only ever holds ciphertext. Recipients preview code with syntax highlighting, read rendered Markdown and Mermaid diagrams, and play media in the browser without downloading first. Storage lands on local disk, S3, OpenStack Swift, or Google Cloud Storage, with metadata in SQLite, PostgreSQL, or MySQL, and sign-in through local accounts, Google, GitHub, or OIDC. The web interface speaks twelve languages with light, dark, and custom themes, and Prometheus metrics plus an MCP server connect Plik to monitoring and AI assistants. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Sharry moves files in both directions: you hand someone a download link, and they hand files back to you, without either side juggling accounts on a commercial transfer service. Upload a file and you get a public URL that is hard to guess but open to anyone who has it; add a password as a second secret, set how long the share lives, and cap how many times it may be downloaded. Expired shares clean themselves up on a schedule. Uploads run over the tus protocol, so a dropped connection in the middle of a two-gigabyte video is an inconvenience, not a restart: send the same file again and it resumes from the last received chunk. Downloads support caching and range requests, which means recipients can stream a video in the browser and scrub its timeline instead of waiting for the whole file. The reverse direction is what makes Sharry unusual: every registered user can maintain alias pages behind their own unguessable URLs, where clients, students, or family members upload files straight to that user, with an email notification when something arrives. Everything is scriptable through a documented REST API, and files can live in the database, on the filesystem, or in S3-compatible storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

QuickDrop functions as an ephemeral, self-hosted file distribution node and pastebin that eliminates account requirements for rapid data transfers. Users can drag individual files, paste plain text code snippets, or drop entire folder structures while preserving complete directory hierarchies through automated client manifests. Resumable chunked transfers split multi-gigabyte payloads into resilient blocks, ensuring dependable uploads over unstable network connections. Senders can protect sensitive documents with optional AES encryption at rest, individual passphrase requirements, and automatic metadata stripping that removes GPS coordinates and camera EXIF markers. Granular share token policies restrict access by enforce maximum download quotas, burn-after-reading limits, or strict calendar expiration timestamps. In-browser viewers generate instant previews for code syntax, Markdown documentation, PDF reports, audio tracks, and high-resolution images without downloading files locally. Built-in QR code generators allow mobile devices to retrieve shared payloads instantly across local wireless networks. System operators can govern storage lifecycles through an administrative control panel with configurable retention windows, automated background garbage collection, and custom storage caps. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Most file sharing leaves copies lying around forever; Tessera shares things with a built-in goodbye. Drop in a file, a whole folder, a code snippet, or a link and you get back a short code and a URL that anyone can open until it expires or hits the download count you set, at which point it is deleted. Expiry is checked on every request and each retrieval is counted atomically, so a one-time share cannot be raced by two people at once. Passwords can be required before anything is shown, code arrives syntax-highlighted, and images, SVGs, and diagrams preview in the page, with link cards when you paste the URL into chat. Uploads resume after interruptions and stream through the server without ballooning memory at any size. Behind the scenes you choose where bytes live: local disk, S3-compatible storage, Azure Blob, Google Cloud Storage, or WebDAV, several at once, added or retired from the admin panel without a restart. Accounts are optional for a home server, sign-in through OpenID Connect suits a team, and roles with per-account quotas decide who may upload, view everyone's shares, or change settings. Optional malware scanning, anonymous-upload caps, and rate-limited code lookups keep a public instance honest. A CLI and API tokens drive the same endpoints as the web app, so scripts can share and clean up exactly like people. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Screenshot, copy link, done: that is the loop Flare is built to make instant on your own server. Connect ShareX, Flameshot, KDE Spectacle, or a plain upload script once, and captures land in a vault you control instead of a third-party host that deletes them next month. Files live in folders with nested structure, bulk moves, automatic tagging rules, and one share link per folder, while previews handle images, video, PDFs, and syntax-highlighted code without downloading anything. Search digs through filenames, dates, and text extracted from images by OCR, so the screenshot from three weeks ago is findable by what it says. Password-protect a sensitive file, keep another private entirely, or publish it with a rich embed that unfurls properly wherever you paste the link. An appearance studio restyles branding, color palettes, and share page layouts, upload profiles carry reusable defaults between browser and screenshot tools, and the extras round out the kit: a URL shortener with click tracking, a pastebin, storage quotas, invite links, and tokens with signed webhooks for your own integrations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

015 is a send-it-and-forget-it file sharing service for files that should exist for hours, not forever. Drop in a large file and it uploads in chunks, resuming where it stopped if the connection drops, while a short pickup code and a share link give the recipient two easy ways to collect it. If the same file was uploaded before, its hash gives it away and the transfer completes instantly without moving the data again. Every share carries your rules: an expiration time, a password, and a download count limit, enforced by signed download tokens so a shared link cannot be passed around indefinitely. Uploaded images can be compressed or converted in the background while you keep working, and text snippets share through the same expiring-link system when a file is overkill. Images and videos preview in the browser before downloading, and email or webhook notifications can tell you when a share is picked up. The interface speaks seven languages and answers just as well on a phone as on a desktop. When the window closes, a daily janitor sweeps expired files off the disk, so the server never quietly fills with forgotten uploads. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

PrivateBin shares text and files with true zero-knowledge encryption: the server stores only ciphertext it cannot decrypt because the key exists exclusively in the URL fragment that never reaches the server. With over 8,400 GitHub stars and 500,000+ Docker pulls, it has become the standard for privacy-respecting paste sharing where not even the hosting operator can read stored content. All encryption uses 256-bit AES in Galois Counter mode performed entirely client-side in the browser. Burn-after-reading mode destroys pastes on first view, while configurable expiration timers automatically purge content after periods ranging from five minutes to forever. Optional password protection adds a second encryption layer requiring recipients to enter a passphrase before decryption occurs. Discussion threads enable anonymous or nickname-based commenting on pastes with IP-based identicon avatars for visual identity. Markdown rendering with live preview formats pastes as styled HTML, and syntax highlighting through prettify.js supports dozens of programming languages across four color themes. File upload support enables sharing images, PDFs, and media files with in-browser preview. QR code generation converts paste URLs for mobile device transfer. Customizable templates include Bootstrap 5, classic Bootstrap CSS, and Darkstrap themes. Storage backends support filesystem, MySQL, PostgreSQL, SQLite, Amazon S3, and Google Cloud Storage. Deploy via Docker with the privatebin/nginx-fpm-alpine image on port 8080. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. zlib licensed.

Paaster is the pastebin for snippets too sensitive for a public paste site: every paste is encrypted in your browser before upload, so the server only ever stores ciphertext it cannot read. Paste code or logs and the text is sealed with libsodium the moment you stop typing, with the secret riding in the link fragment that browsers never send to a server. Share the link and only its holder can open the paste; share it as a QR code, or beam it to your other device with a five-minute code using Send to device. Set a paste to delete after its first view or after a chosen time, protect it with an access code, and let automatic language detection syntax-highlight the result. Your own pastes stay browsable in a local history, themes and keyboard shortcuts keep the editor fast, and drag-and-drop file sharing works the same encrypted way. Upload from the terminal with the companion CLI or the REST API, and store everything in MongoDB with MinIO, S3, or Cloudflare R2 holding the encrypted blobs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Share code snippets, logs, configs, and notes without registration, tracking, or ads: Lenpaste is a minimal, self-hosted, anonymous alternative to pastebin.com. It is deliberately spartan in the right ways: no accounts, no JavaScript required (the entire site works in text browsers and hardened setups), and cookies used solely to store display preferences. Pastes support syntax highlighting across a long list of languages (from ApacheConf and Arduino to mainstream stacks), configurable expiration from minutes to unlimited, one-use "burn after reading" pastes that self-delete on first view, optional author attribution, and iframe embedding for dropping pastes into other pages. The form-encoded HTTP API covers everything the UI does - create pastes with title, syntax, expiration, and line-ending normalization, fetch them by ID, and query server capabilities - making it trivial to pipe command output to your paste server from shell scripts. Server operators control maximum title and body lengths, maximum paste lifetime, rate limits for viewing and creation, search-engine indexing policy, and can lock private instances behind HTTP Basic authentication. It deploys as a single lightweight Docker container, giving your team a snippet-sharing endpoint where the content never touches a third-party service.

Built for self-hosting from the ground up, Kutt is a modern, MIT-licensed URL shortener: zero-configuration setup, no build step, and SQLite, PostgreSQL, or MySQL with optional Redis caching. Links carry real management features - custom slugs from a configurable alphabet (confusable characters like 0/O and l/1 omitted by default), password protection, descriptions, expiration times, and the ability to edit a destination URL without changing the short link already in circulation. Custom domains make branded short links first-class: add as many as you like and serve each under your own name instead of a third-party's. Private, per-link statistics track clicks, browsers, operating systems, and countries without logging visitor IPs or sensitive data. An admin page manages users and links instance-wide, and two environment flags (DISALLOW_REGISTRATION, DISALLOW_ANONYMOUS_LINKS) lock the instance down for private use; OpenID Connect login integrates with an existing identity provider. Automation runs through a documented REST API - create, list, delete, and pull stats - plus Chrome and Firefox extensions and ShareX compatibility for shortening from anywhere. Built with Node.js and React, deployed in one Docker container, it replaces Bitly with something you own: your domain, your analytics, and links that never die with a vendor.

With over 5,100 GitHub stars and eight years of active development since 2016, Shlink has become the definitive self-hosted URL shortener for teams that need unlimited links, full visitor analytics, and complete data ownership without per-link pricing or monthly caps. The PHP backend built on the Mezzio framework with Doctrine ORM serves redirects through any number of custom domains on a single instance, generating unique short codes or accepting custom slugs including multi-segment paths and emoji characters. Every click is tracked with anonymized visitor data including geolocation by country, city, and coordinates, browser and operating system identification, referrer source, and device type classification, all stored in your choice of MySQL, MariaDB, PostgreSQL, Microsoft SQL Server, or SQLite. Dynamic redirect rules route visitors to different destinations based on geolocation, device type, or browser language, enabling targeted campaigns from a single short URL. The REST API exposes every operation with OpenAPI documentation and an interactive sandbox at api-spec.shlink.io, while the CLI provides equivalent functionality for scripting and automation. The official progressive web app at app.shlink.io manages multiple Shlink instances from a single interface with URL creation, tag management, and detailed visit charts. Real-time event integration supports both Mercure and RabbitMQ for webhook-style notifications on new visits. Third-party imports migrate existing short URLs from Bitly and YOURLS with visit history preserved. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With 24,000 GitHub stars and infrastructure processing over 100 million clicks and 2 million links monthly for marketing teams at Twilio, Buffer, Framer, Perplexity, and Vercel, Dub is the most widely adopted open-source link attribution platform — unifying branded short links, real-time conversion analytics, and affiliate programs in a single self-hostable tool. Create short links on custom domains with built-in QR code generation, device and geographic targeting rules, A/B testing for destination URLs, deferred deep linking for mobile apps, and custom social media preview cards. The attribution engine tracks the complete customer journey from first click through lead capture to final sale, calculating lifetime value, retention rates, and multi-touch attribution across campaigns. Real-time analytics visualize clicks, leads, and revenue with filtering by geography, device, browser, referrer, operating system, and UTM parameters — plus an "Ask AI" feature that generates personalized reports from natural language queries. The partner program module enables embedded referral and affiliate programs with custom reward structures, automated payouts, and partner dashboards for product-led growth. Programmatic link creation via native SDKs for TypeScript, Python, Go, PHP, and Ruby supports enterprise-scale campaigns with real-time webhook notifications on link events. Migration assistants import existing links from Bitly, Rebrandly, and Short.io with redirects preserved. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPLv3 licensed.

Most link shorteners bloat a simple redirect service with heavy databases and invasive tracking scripts, whereas Chhoto URL delivers a fast, self-hosted URL shortener with custom slugs, QR codes, and privacy-respecting click counts. Paste any destination URL to generate a memorable adjective-name pair, a compact random UID, or your own custom alias in one click. Every shortened link redirects visitors immediately without interstitial splash pages, countdown timers, or tracking cookies. You can attach searchable notes to any entry, update the target URL after creation, and configure automatic link expiration timers down to the minute. Built-in QR code generation lets you preview and share scannable codes directly from the dashboard table. Real-time search filters links across slugs, destination URLs, and notes, while anonymous hit counters track total visits without logging visitor IP addresses. Administrators can run a private instance protected by OIDC single sign-on or Argon2-hashed credentials, or enable public mode so guests can shorten links with enforced expiration limits. Automation scripts and CLI tools can create, inspect, and delete links programmatically using API keys over the JSON API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

ShareX and file uploads, next generation: Zipline is a Node.js/React/PostgreSQL server that turns screenshot sharing and file hosting into something you run yourself instead of renting from Imgur or a paid image host. The core workflow is built around ShareX: generate an .sxcu config from your account settings, import it, and every screenshot or clipboard capture uploads to your domain with a short link copied automatically. Uploads accept any file type, organized with folders and tags, with token-protected uploading, optional password protection, view-limited auto-deletion, image compression, metadata stripping, automatic video thumbnails, and chunked/partial uploads for large files. File URLs come in configurable formats - UUIDs, dates, random alphanumerics, original names, even zero-width spaces. A built-in URL shortener adds vanity slugs, passwords, view caps, and custom domains. Discord embeds are first-class: customize OG metadata titles, descriptions, and colors so links unfurl exactly how you want, and fire fully customizable Discord or HTTP webhooks on each upload. Authentication is serious: OAuth2 (Discord, GitHub, Google, OIDC), TOTP two-factor, and passkeys, with invite-based registration and per-user quotas for shared instances. Storage targets local disk or any S3-compatible backend, a full REST API automates everything, and custom themes plus a PWA round out the experience.

The file is on your laptop, the laptop is downstairs, and cloud drives are still syncing yesterday; Local Content Share ends that dance by giving every device on your network one shared page on port 8080. Type or paste a snippet and it appears instantly on your phone, tablet, and work machine, because Server-Sent Events push every upload, edit, and deletion to all open browsers without a refresh. Files ride along three ways: pick them, drag several at once onto the text area, or paste straight from the clipboard, screenshots included. A separate notepad holds Markdown with edit and preview modes, auto-saving as you type so a thought started on the couch continues at the desk. Links get their own newest-first section, everything can be renamed or edited in place, and each item carries an expiration clock you can set to an hour, a day, or a custom span like 34m or 2w, after which it quietly deletes itself. The interface follows your system light or dark theme, installs as a phone PWA, and needs no accounts and no internet, which is also the honest catch: there is no login, so keep it on trusted networks or behind an authenticated proxy. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.