Jirafeau
Upload a file, get a unique download link and a separate delete link - Jirafeau has done
exactly this one thing since 2008. It is plain PHP with no database, no mail server, no
JavaScript framework, and no external dependencies - files and metadata live on the
filesystem, which is why it runs on nearly anything and why it has outlasted most of its
imitators. Uploads use the HTML5 file API, so PHP's post_max_size ceiling does not constrain
file size, with live progress showing speed, percentage, and time remaining. Every upload
takes options: expiration from one minute to a year to unlimited, self-destruct after first
download, and password protection with configurable policy - passwords can be optional,
required, or server-generated with complexity rules. Server-side encryption (modern builds use
XChaCha20-Poly1305) stores files encrypted at rest with the decrypt key embedded only in the
download URL, never on the server, so a compromised host cannot read the contents. Unencrypted
deployments get file-level deduplication - identical files stored once with multiple links.
Upload access can be gated by password lists or IP allowlists, a small admin panel manages
stored files, and a CLI cleanup script handles expired files via cron. Recipients can preview
supported files in-browser.
Deploy