Uncensored Send

A small self-hosted file drop. Uploads land in a flat data directory, expire on their own, and are served back as inert attachments.

Built for sharing large binaries with friends so that I don't have to manually manage the tmp folder on my generic web server.

• One static Go binary, standard library only.
• Anyone who can reach the page may upload, within a size cap and a lifetime.
• Named tokens raise those limits, unlock vanity names, and can grant admin.

Quickstart

go build
./uncensored-send token add me --vanity --admin
./uncensored-send

Open http://localhost:8080, click Log in, paste the token. That's it.

When you put it behind a reverse proxy that terminates TLS, set --public-url, and make sure the proxy neither buffers request bodies nor imposes its own upload limit.

The data directory holds the uploads, tokens.json, and session.key, which seals the login cookie so that it carries a session rather than the token itself. The last two are credential material, written 0600. Deleting session.key logs every browser session out and costs nothing else; a new one is generated on the next start.

Options

Read ./uncensored-send --help rather than this file.

Every option also reads from UNCENSORED_SEND_-prefixed environment variables.

Development

go test ./...
go vet ./...