Blazing fast file uploader and awesome bunker written in node! 🚀
Go to file
2020-08-23 02:20:26 +07:00
.github Updated actions build script to use node 12.x 2020-07-30 06:03:45 +07:00
controllers Refactored "hhmmss" -> "uptime" 2020-08-22 01:39:04 +07:00
database !!! RUN "yarn migrate" !!! 2020-05-16 22:32:32 +07:00
dist Rebuilt client assets and bumped v1 version string 2020-08-21 18:40:05 +00:00
pages/error Updated built-in error pages 2020-05-24 03:45:36 +07:00
public Transitioned styling to Sass 2020-07-28 21:47:48 +07:00
routes Disabled file delete GET API 2020-06-21 22:21:38 +07:00
scripts Merge branch 'camjac251-camjac251-build-action' into safe.fiery.me 2020-07-30 05:09:08 +07:00
src Updated home.js 2020-08-23 02:20:26 +07:00
views Transitioned styling to Sass 2020-07-28 21:47:48 +07:00
.browserslistrc Updates (very important to read) 2019-09-15 13:20:11 +07:00
.dockerignore Ignore .git and .github directories when run dockerfile copy command. 2020-08-21 12:17:15 -03:00
.editorconfig Updates 2018-04-13 23:20:57 +07:00
.env.example add docker-compose stack 2020-07-03 22:50:24 +07:00
.eslintignore Updated 2019-09-17 11:13:41 +07:00
.eslintrc.js Updated dependencies 2020-05-17 00:11:10 +07:00
.gitignore Updated dependencies 2020-05-19 23:46:23 +07:00
.stylelintignore Updated 2019-09-17 11:13:41 +07:00
.stylelintrc.json Transitioned styling to Sass 2020-07-28 21:47:48 +07:00
AUTHORS Updated 2019-09-12 14:44:31 +07:00
config.sample.js Clean ups 2020-07-03 22:55:43 +07:00
docker-compose.yaml Update docker-compose.yaml 2020-07-03 22:50:24 +07:00
Dockerfile Improved the image creation and reduced final size from 718MB to 241MB. 2020-08-21 12:35:16 -03:00
gulpfile.js Transitioned styling to Sass 2020-07-28 21:47:48 +07:00
LICENSE De loli-safe (#77) 2018-04-26 08:54:07 +02:00
logger.js Added deletion URL for ShareX or derivatives 2020-06-20 01:28:23 +07:00
lolisafe.js Added system & node uptime to Statistics menu 2020-08-22 01:35:30 +07:00
nginx-ssl.sample.conf Updated Nginx sample configs 2020-05-28 09:54:40 +07:00
nginx.docker.conf Fixed typos in sample nginx conf files 2020-08-22 00:46:11 +07:00
nginx.sample.conf Fixed typos in sample nginx conf files 2020-08-22 00:46:11 +07:00
package.json Added system & node uptime to Statistics menu 2020-08-22 01:35:30 +07:00
README.md Added remarks about github actions to README.md 2020-07-30 06:11:02 +07:00
real-ip-from-cf Updated real-ip-from-cf 2020-07-02 15:22:22 +07:00
yarn.lock Added system & node uptime to Statistics menu 2020-08-22 01:35:30 +07:00

lolisafe, a small safe worth protecting

safe.fiery.me

GitHub license

safe.fiery.me

JavaScript Style Guide

This fork is the one being used at https://safe.fiery.me. If you are looking for the original, head to WeebDev/lolisafe.

If you want to use an existing lolisafe database with this fork, run node ./database/migration.js (or yarn migrate) at least once to create the new columns introduced in this branch (don't forget to make a backup).

Configuration file of lolisafe, config.js, is also NOT fully compatible with this fork. There are some options that had been renamed and/or restructured. Please make sure your config matches the sample in config.sample.js before starting.

Running in production mode

  1. Ensure you have at least Node v10.x installed (v12.x works fine, but v14.x will likely have issues for now).
  2. Clone this repo.
  3. Copy config.sample.js as config.js.
  4. Modify port, domain and privacy options if desired.
  5. Run yarn install --production to install all production dependencies (Yes, use yarn).
  6. Run yarn start to start the service.

Default admin account:
Username: root
Password: changeme

You can also start it with yarn pm2 if you have PM2.

When running in production mode, the safe will use pre-built client-side CSS/JS files from dist directory, while the actual source codes are in src directory.

The pre-built files were processed with postcss-preset-env, cssnano, bublé, and terser.

Running in development mode

This fork has a separate development mode, with which client-side CSS/JS files in src directory will be automatically rebuilt using Gulp tasks.

  1. Follow step 1 to 4 from the production instructions above.
  2. Run yarn install to install all dependencies (including development ones).
  3. Run yarn develop to start the service in development mode.

You can configure the Gulp tasks through gulpfile.js file.

During development, the rebuilt files will be saved in dist-dev directory instead of dist directory. The service will also automatically serve the files from dist-dev directory instead. This is to avoid your IDE's Git from unnecessarily rebuilding diff of the modified files.

Once you feel like your modifications are ready for production usage, you can then run yarn build to build production-ready files that will actually go to dist directory.

If you are submitting a Pull Request, running yarn build before pushing the commit is NOT necessary. As long as the changes already work well in development mode, you may push the commit as-is.
This fork uses GitHub Actions to automatically rebuild client assets after every commit that modifies the source files in src directory.

Failing to build dependencies

Some dependencies may fail to build with Python 2.x, in particular sqlite3 package.

If that happens, I recommend building dependencies with Python 3.x instead.

To force Python 3.x for dependencies building, you can choose to create a file named .npmrc in your lolisafe root directory, and fill it with:

python=/path/to/your/python3.x

Or you can try the alternative solutions listed in here: https://github.com/nodejs/node-gyp#configuring-python-dependency.

Note: Despite the file being named .npmrc, that preference will also be used when installing dependencies with yarn, so I still recommend sticking with it.

Updating when you have modified some files

Try to use git stash.

Basically you'll be doing this:

  1. git stash to stash away your changes.
  2. git pull to pull updates.
  3. yarn install (or yarn install --production) to install dependencies matching the updated yarn.lock file.
  4. git stash pop (or git stash apply) to restore your changes.

Be warned that some files may have been updated too heavily that they will require manual merging.

If you only do some small modifications such as editing views/_globals.njk and not much else, it's generally safe to do this even in a live production environment. But it's still best practice to at least review just what have been updated, and whether you will need to do some manual merging beforehand.

Still, I heavily recommend simply forking this repository and manually merging upstream changes whenever you feel like doing so. Read more about syncing a fork.

Afterwards, you can instead clone your fork in your production server and pull updates from there. You can then choose to only install production dependencies with yarn install --production there (hint: this is how I setup safe.fiery.me).

Script for missing thumbnails

Thumbnails will not be automatically generated for files that were uploaded before enabling thumbnails generation in the config file.

To generate thumbnails for those files, you can use yarn thumbs.

$ yarn thumbs
$ node ./scripts/thumbs.js

Generate thumbnails.

Usage  :
node scripts/thumbs.js <mode=1|2|3> [force=0|1] [verbose=0|1] [cfcache=0|1]

mode   : 1 = images only, 2 = videos only, 3 = both images and videos
force  : 0 = no force (default), 1 = overwrite existing thumbnails
verbose: 0 = only print missing thumbs (default), 1 = print all
cfcache: 0 = do not clear cloudflare cache (default), 1 = clear cloudflare cache

For example, if you only want to generate thumbnails for image files without overwriting existing ones, you can run yarn thumbs 1, or if you want to generate thumbnails for both image and video files, while also overwriting existsing ones, you can run yarn thumbs 3 1.

You will also need to use this script to overwrite existing thumbnails if you want to change thumbnail size.

ClamAV support

This fork has an optional virus scanning support using ClamAV, through clamdjs library.

It will scan new files right after they are uploaded. It will then alert the uploaders of the virus names in ClamAV's database if their files are dirty.

Unfortunately, this will slow down uploads processing as it has to wait for scan results before responding the uploaders, however it's still highly recommended for public usage (or at least if you find Google Safe Search too annoying).

To enable this, make sure you have ClamAV daemon running, then fill in the daemon's IP and port into your config file.

From the config file you can also choose to exclude certain extensions from being scanned to lessen the burden on your server.