Describe SealShare 2.1 on the website
The site now says files are encrypted in the browser and sent in chunks, describes the password generator and its admin settings, explains why uploads need HTTPS and how to serve it, and replaces the old PHP upload cap with the admin's file size limits and the chunk size. The alt texts and captions match the retaken screenshots. The README no longer lists Tailwind CSS, and the website rules describe the encryption and the copied colours accurately. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This commit is contained in:
Andreas Reinhold / reini
co-authored by
Claude Opus 5
Claude Opus 5
parent
e833647768
commit
1bcb868897
@@ -6,4 +6,4 @@ paths:
|
||||
# Website
|
||||
|
||||
## website/ is the live site, uploaded by hand
|
||||
website/ is a faithful copy of sealshare.nonameweb.ch (METANET hosting), hand-written HTML/CSS with no build step, uploaded wholesale when it changes. Colours in css/theme.css are copied from the indigo profile (the JSON's top-level light/dark) in resources/css/material-scheme.json — copy them again if indigo is regenerated differently; the site does not follow the admin's colour profile. The comparison tables are dated and every competitor value has a source from the product's own site, docs or repo; an unsourced value is "—", never a guess. Never call SealShare's encryption end-to-end (it encrypts at rest on the server). Nothing may load from another host except plausible.io. tests/Feature/WebsiteTest.php guards all of this.
|
||||
website/ is a faithful copy of sealshare.nonameweb.ch (METANET hosting), hand-written HTML/CSS with no build step, uploaded wholesale when it changes. Colours in css/theme.css are copied from the indigo profile in resources/css/material-scheme.json: the standard light and dark values (profiles.indigo.light/dark) and the high-contrast light and dark values (profiles.indigo.contrast.high) — copy them again if indigo is regenerated differently; the site does not follow the admin's colour profile. The comparison tables are dated and every competitor value has a source from the product's own site, docs or repo; an unsourced value is "—", never a guess. Never call SealShare's encryption end-to-end (files are encrypted in the browser with a key the server issues, and the server decrypts them for downloads). Nothing may load from another host except plausible.io. tests/Feature/WebsiteTest.php guards all of this.
|
||||
|
||||
@@ -40,7 +40,7 @@ A simple, self-hosted file sharing solution built with Laravel. Upload files, ge
|
||||
|-------|-----------|
|
||||
| **Framework** | Laravel 13 |
|
||||
| **Application Server** | FrankenPHP (via Laravel Octane) |
|
||||
| **Frontend** | Livewire 4, Tailwind CSS 4, [Livewire Material](https://gitea.nonameweb.ch/noNameWEB/livewire-material) (Material 3 Expressive) |
|
||||
| **Frontend** | Livewire 4, [Livewire Material](https://gitea.nonameweb.ch/noNameWEB/livewire-material) (Material 3 Expressive) |
|
||||
| **Authentication** | Laravel Fortify |
|
||||
| **Encryption** | Chunked AES-256-GCM (WebCrypto in the browser), keys wrapped with Argon2id |
|
||||
| **ZIP Downloads** | [ZipStream-PHP](https://packagist.org/packages/maennchen/zipstream-php) |
|
||||
|
||||
+35
-25
@@ -115,7 +115,7 @@
|
||||
<source media="(prefers-color-scheme: dark)" srcset="img/screenshots/desktop/dark/01-upload-1600.webp 1600w, img/screenshots/desktop/dark/01-upload-800.webp 800w" sizes="(max-width: 960px) 94vw, 58vw">
|
||||
<img src="img/screenshots/desktop/light/01-upload-800.webp" srcset="img/screenshots/desktop/light/01-upload-1600.webp 1600w, img/screenshots/desktop/light/01-upload-800.webp 800w" sizes="(max-width: 960px) 94vw, 58vw"
|
||||
width="1512" height="982" loading="eager" decoding="async"
|
||||
alt="SealShare's upload page with files selected and share options">
|
||||
alt="SealShare's upload page with files selected and a generated password in the share options">
|
||||
</picture>
|
||||
</div>
|
||||
</div>
|
||||
@@ -176,7 +176,7 @@
|
||||
<li class="step">
|
||||
<span class="badge-icon" aria-hidden="true"><svg viewBox="0 0 100 100"><use href="#s-cookie-9"/></svg><svg class="icon" aria-hidden="true"><use href="#i-cloud-upload"/></svg></span>
|
||||
<h3 class="title">Upload</h3>
|
||||
<p>Drop files or whole folders. Add a password, an expiry and a download limit if you want.</p>
|
||||
<p>Drop files or whole folders. Add a password, an expiry and a download limit if you want — SealShare can generate the password for you.</p>
|
||||
</li>
|
||||
<li class="step">
|
||||
<span class="badge-icon badge-icon--secondary" aria-hidden="true"><svg viewBox="0 0 100 100"><use href="#s-soft-burst"/></svg><svg class="icon" aria-hidden="true"><use href="#i-qr-code-2"/></svg></span>
|
||||
@@ -197,13 +197,13 @@
|
||||
<div class="section__head">
|
||||
<span class="eyebrow"><svg class="icon" aria-hidden="true"><use href="#i-check"/></svg>Features</span>
|
||||
<h2 class="headline" id="features-title">Everything a file exchange with customers needs</h2>
|
||||
<p class="lede">And nothing that turns it into a project: SealShare runs from a single container and is set up in a few minutes. It follows your system's light or dark theme, on desktop and phone.</p>
|
||||
<p class="lede">And nothing that turns it into a project: SealShare runs from a single container and is set up in a few minutes. It works on desktop and phone, in a Light, Dark or System theme, and in high contrast when your system asks for it.</p>
|
||||
</div>
|
||||
<div class="features">
|
||||
<article class="feature">
|
||||
<span class="badge-icon" aria-hidden="true"><svg viewBox="0 0 100 100"><use href="#s-cookie-6"/></svg><svg class="icon" aria-hidden="true"><use href="#i-drive-folder-upload"/></svg></span>
|
||||
<h3>Files and folders</h3>
|
||||
<p>Drag & drop or browse; folders keep their structure, with live upload progress.</p>
|
||||
<p>Drag & drop or browse; folders keep their structure. Files are encrypted in the browser and sent in chunks, with progress per file and a failed chunk retried on its own.</p>
|
||||
</article>
|
||||
<article class="feature">
|
||||
<span class="badge-icon badge-icon--secondary" aria-hidden="true"><svg viewBox="0 0 100 100"><use href="#s-cookie-6"/></svg><svg class="icon" aria-hidden="true"><use href="#i-link"/></svg></span>
|
||||
@@ -218,12 +218,12 @@
|
||||
<article class="feature">
|
||||
<span class="badge-icon" aria-hidden="true"><svg viewBox="0 0 100 100"><use href="#s-cookie-6"/></svg><svg class="icon" aria-hidden="true"><use href="#i-lock"/></svg></span>
|
||||
<h3>Password protection</h3>
|
||||
<p>Protect a share with a password, or generate one to copy; its encryption key is derived from it.</p>
|
||||
<p>Type a password or generate one, as random characters or a passphrase. It is shown once more beside the new link, and it protects the share's own random key.</p>
|
||||
</article>
|
||||
<article class="feature">
|
||||
<span class="badge-icon badge-icon--secondary" aria-hidden="true"><svg viewBox="0 0 100 100"><use href="#s-cookie-6"/></svg><svg class="icon" aria-hidden="true"><use href="#i-encrypted"/></svg></span>
|
||||
<h3>Encrypted at rest</h3>
|
||||
<p>Encrypted at rest with AES-256-GCM; with a share password the key is never stored.</p>
|
||||
<p>Encrypted in the browser with AES-256-GCM before upload, and stored only encrypted. With a share password the key is never stored as it is.</p>
|
||||
</article>
|
||||
<article class="feature">
|
||||
<span class="badge-icon badge-icon--tertiary" aria-hidden="true"><svg viewBox="0 0 100 100"><use href="#s-cookie-6"/></svg><svg class="icon" aria-hidden="true"><use href="#i-schedule"/></svg></span>
|
||||
@@ -243,7 +243,7 @@
|
||||
<article class="feature">
|
||||
<span class="badge-icon badge-icon--tertiary" aria-hidden="true"><svg viewBox="0 0 100 100"><use href="#s-cookie-6"/></svg><svg class="icon" aria-hidden="true"><use href="#i-delete-sweep"/></svg></span>
|
||||
<h3>Automatic clean-up</h3>
|
||||
<p>Expired shares and their files are deleted every hour.</p>
|
||||
<p>Expired shares and their files are deleted every hour, and unfinished uploads after 4 hours.</p>
|
||||
</article>
|
||||
<article class="feature">
|
||||
<span class="badge-icon" aria-hidden="true"><svg viewBox="0 0 100 100"><use href="#s-cookie-6"/></svg><svg class="icon" aria-hidden="true"><use href="#i-dashboard"/></svg></span>
|
||||
@@ -252,8 +252,8 @@
|
||||
</article>
|
||||
<article class="feature">
|
||||
<span class="badge-icon badge-icon--secondary" aria-hidden="true"><svg viewBox="0 0 100 100"><use href="#s-cookie-6"/></svg><svg class="icon" aria-hidden="true"><use href="#i-admin-panel-settings"/></svg></span>
|
||||
<h3>Limits and quota</h3>
|
||||
<p>Maximum file and share size, files per share, storage quota, default expiry.</p>
|
||||
<h3>Limits and defaults</h3>
|
||||
<p>Maximum file and share size, files per share, storage quota, default expiry, and a password generator that is off, on request or prefilled.</p>
|
||||
</article>
|
||||
<article class="feature">
|
||||
<span class="badge-icon badge-icon--tertiary" aria-hidden="true"><svg viewBox="0 0 100 100"><use href="#s-cookie-6"/></svg><svg class="icon" aria-hidden="true"><use href="#i-palette"/></svg></span>
|
||||
@@ -273,7 +273,7 @@
|
||||
<article class="feature">
|
||||
<span class="badge-icon badge-icon--tertiary" aria-hidden="true"><svg viewBox="0 0 100 100"><use href="#s-cookie-6"/></svg><svg class="icon" aria-hidden="true"><use href="#i-deployed-code"/></svg></span>
|
||||
<h3>One Docker image</h3>
|
||||
<p>FrankenPHP with Laravel Octane, optional automatic TLS and SQLite — no separate database.</p>
|
||||
<p>FrankenPHP with Laravel Octane and SQLite — no separate database. Uploads need HTTPS: turn on automatic TLS, or use your reverse proxy.</p>
|
||||
</article>
|
||||
</div>
|
||||
</div>
|
||||
@@ -305,11 +305,11 @@
|
||||
data-light-src="img/screenshots/desktop/light/01-upload-800.webp" data-light-srcset="img/screenshots/desktop/light/01-upload-1600.webp 1600w, img/screenshots/desktop/light/01-upload-800.webp 800w"
|
||||
data-dark-src="img/screenshots/desktop/dark/01-upload-800.webp" data-dark-srcset="img/screenshots/desktop/dark/01-upload-1600.webp 1600w, img/screenshots/desktop/dark/01-upload-800.webp 800w"
|
||||
width="1512" height="982" loading="lazy" decoding="async"
|
||||
alt="The upload page with two files selected and the share options filled in">
|
||||
alt="The upload page with four files selected and a generated password in the share options">
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<figcaption><strong>Upload files and folders</strong><span>Drag & drop, then set a password, an expiry and a download limit.</span></figcaption>
|
||||
<figcaption><strong>Upload files and folders</strong><span>Drag & drop, then generate a password and set an expiry and a download limit.</span></figcaption>
|
||||
</figure>
|
||||
</li>
|
||||
<li>
|
||||
@@ -321,11 +321,11 @@
|
||||
data-light-src="img/screenshots/desktop/light/02-share-created-800.webp" data-light-srcset="img/screenshots/desktop/light/02-share-created-1600.webp 1600w, img/screenshots/desktop/light/02-share-created-800.webp 800w"
|
||||
data-dark-src="img/screenshots/desktop/dark/02-share-created-800.webp" data-dark-srcset="img/screenshots/desktop/dark/02-share-created-1600.webp 1600w, img/screenshots/desktop/dark/02-share-created-800.webp 800w"
|
||||
width="1512" height="982" loading="lazy" decoding="async"
|
||||
alt="The share created page with the share link, its details and the QR code button">
|
||||
alt="The share created page with the link, the password beside it, the share's details and the QR code button">
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<figcaption><strong>Share the link</strong><span>Copy it, show it as a QR code or send it from the share sheet.</span></figcaption>
|
||||
<figcaption><strong>Share the link</strong><span>Copy it and its password, show it as a QR code or send it from the share sheet.</span></figcaption>
|
||||
</figure>
|
||||
</li>
|
||||
<li>
|
||||
@@ -369,7 +369,7 @@
|
||||
data-light-src="img/screenshots/desktop/light/05-admin-dashboard-800.webp" data-light-srcset="img/screenshots/desktop/light/05-admin-dashboard-1600.webp 1600w, img/screenshots/desktop/light/05-admin-dashboard-800.webp 800w"
|
||||
data-dark-src="img/screenshots/desktop/dark/05-admin-dashboard-800.webp" data-dark-srcset="img/screenshots/desktop/dark/05-admin-dashboard-1600.webp 1600w, img/screenshots/desktop/dark/05-admin-dashboard-800.webp 800w"
|
||||
width="1512" height="982" loading="lazy" decoding="async"
|
||||
alt="The admin dashboard with share statistics, disk usage and the table of shares">
|
||||
alt="The admin dashboard with share and file counts, disk usage and the list of shares with Sort by">
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
@@ -385,11 +385,11 @@
|
||||
data-light-src="img/screenshots/desktop/light/06-admin-settings-800.webp" data-light-srcset="img/screenshots/desktop/light/06-admin-settings-1600.webp 1600w, img/screenshots/desktop/light/06-admin-settings-800.webp 800w"
|
||||
data-dark-src="img/screenshots/desktop/dark/06-admin-settings-800.webp" data-dark-srcset="img/screenshots/desktop/dark/06-admin-settings-1600.webp 1600w, img/screenshots/desktop/dark/06-admin-settings-800.webp 800w"
|
||||
width="1512" height="982" loading="lazy" decoding="async"
|
||||
alt="The admin settings page with branding and upload limits">
|
||||
alt="The admin settings page with the colour profile, branding and upload protection">
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<figcaption><strong>Admin settings</strong><span>Upload limits, storage quota, your logo and title.</span></figcaption>
|
||||
<figcaption><strong>Admin settings</strong><span>Colour profile, your logo and title, upload protection and limits.</span></figcaption>
|
||||
</figure>
|
||||
</li>
|
||||
</ul>
|
||||
@@ -480,7 +480,7 @@
|
||||
<tr><th scope="row">End-to-end encryption</th><td class="is-us" data-compare="sealshare-e2e">No</td><td>Enterprise add-on</td><td>No</td><td>No</td><td>Higher Workspace editions</td></tr>
|
||||
<tr><th scope="row">Folder upload</th><td class="is-us">Yes</td><td>No, folders are flattened</td><td>Yes</td><td>Yes</td><td>Yes</td></tr>
|
||||
<tr><th scope="row">Custom branding</th><td class="is-us">Yes: logo, title, description</td><td>Ultimate plan and up</td><td>Through paid kDrive</td><td>Standard plan and up</td><td>—</td></tr>
|
||||
<tr><th scope="row">Maximum file size</th><td class="is-us">Set by you (server limits)</td><td>3 GB or 100 GB a month on Free<sup>1</sup></td><td>50 GB per transfer</td><td>2 GB on Basic (free)</td><td>15 GB of free storage</td></tr>
|
||||
<tr><th scope="row">Maximum file size</th><td class="is-us">Set by you (no server cap)</td><td>3 GB or 100 GB a month on Free<sup>1</sup></td><td>50 GB per transfer</td><td>2 GB on Basic (free)</td><td>15 GB of free storage</td></tr>
|
||||
<tr><th scope="row">Licence and cost</th><td class="is-us">MIT, free</td><td>Free (non-commercial use); Starter USD 8/month<sup>2</sup></td><td>Free</td><td>Free; Plus EUR 11.99/month<sup>2</sup></td><td>Free; 100 GB CHF 2/month<sup>2</sup></td></tr>
|
||||
<tr><th scope="row">QR code for the link</th><td class="is-us">Yes</td><td>—</td><td>—</td><td>—</td><td>—</td></tr>
|
||||
</tbody>
|
||||
@@ -505,14 +505,14 @@
|
||||
<tr><th scope="row">End-to-end encryption</th><td class="is-us" data-compare="sealshare-e2e">No</td><td>No</td><td>No</td><td>Optional</td><td>No</td></tr>
|
||||
<tr><th scope="row">Folder upload</th><td class="is-us">Yes</td><td>Yes</td><td>No</td><td>No, files are listed singly<sup>3</sup></td><td>Yes, keeps structure</td></tr>
|
||||
<tr><th scope="row">Custom branding</th><td class="is-us">Yes: logo, title, description</td><td>Yes: logo, name, colours, CSS</td><td>Yes, by editing templates</td><td>Yes: logo, CSS, JavaScript</td><td>Yes: logo, colours, themes</td></tr>
|
||||
<tr><th scope="row">Maximum file size</th><td class="is-us">Set by you (server limits)</td><td>Set by you (1 GB per share by default)</td><td>Set by you (no limit by default)</td><td>Set by you (100 GB by default)</td><td>Set by you (2 GB per share by default)</td></tr>
|
||||
<tr><th scope="row">Maximum file size</th><td class="is-us">Set by you (no server cap)</td><td>Set by you (1 GB per share by default)</td><td>Set by you (no limit by default)</td><td>Set by you (100 GB by default)</td><td>Set by you (2 GB per share by default)</td></tr>
|
||||
<tr><th scope="row">Licence and cost</th><td class="is-us">MIT, free</td><td>BSD-2-Clause, free</td><td>BSD-2-Clause, free</td><td>AGPL-3.0, free</td><td>MIT, free</td></tr>
|
||||
<tr><th scope="row">QR code for the link</th><td class="is-us">Yes</td><td>Yes</td><td>Yes</td><td>Yes</td><td>No</td></tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</div>
|
||||
<p class="compare__note">SealShare encrypts files on the server as they arrive. With a share password the key is never stored; without one it is kept in SealShare's database. A value marked “—” could not be confirmed from the product's own sources. Checked on 13 September 2026.</p>
|
||||
<p class="compare__note">SealShare encrypts files in the browser before they are uploaded. With a share password the key is never stored as it is; without one it is kept in SealShare's database. A value marked “—” could not be confirmed from the product's own sources. Other products checked on 13 September 2026.</p>
|
||||
<div class="compare__notes">
|
||||
<p class="compare__note"><sup>1</sup> WeTransfer's pricing page and its help centre disagree. The pricing page lists password protection on every plan, expiry up to 7 days and up to 100 GB a month on Free; the help centre (May 2026) lists password protection under Ultimate, expiry up to 3 days, and up to 10 transfers or 3 GB in 30 days on Free.</p>
|
||||
<p class="compare__note"><sup>2</sup> The cheapest paid plan, at the price shown in Switzerland on the date above; prices differ by country. WeTransfer's Free plan is for individual, non-commercial use. Dropbox Plus has no passwords or branding for transfers; Google One 100 GB adds storage, not sharing features.</p>
|
||||
@@ -541,9 +541,10 @@
|
||||
<div class="install__copy">
|
||||
<span class="eyebrow"><svg class="icon" aria-hidden="true"><use href="#i-deployed-code"/></svg>Install</span>
|
||||
<h2 class="headline" id="install-title">Running in a few minutes</h2>
|
||||
<p class="lede">All you need is a server with Docker and a domain name.</p>
|
||||
<p class="lede">All you need is a server with Docker, a domain name and HTTPS.</p>
|
||||
<ul class="install__list">
|
||||
<li><svg class="icon" aria-hidden="true"><use href="#i-check"/></svg><span>The image includes the web server, with automatic TLS certificates if you want them, and uses SQLite — no separate database.</span></li>
|
||||
<li><svg class="icon" aria-hidden="true"><use href="#i-check"/></svg><span>The image includes the web server and uses SQLite — no separate database.</span></li>
|
||||
<li><svg class="icon" aria-hidden="true"><use href="#i-check"/></svg><span>Uploads need HTTPS. Set <code>AUTO_HTTPS</code> to get a Let's Encrypt certificate, or put a reverse proxy that terminates TLS in front.</span></li>
|
||||
<li><svg class="icon" aria-hidden="true"><use href="#i-check"/></svg><span>Migrations run on start. Open your domain and the setup wizard creates the first admin account.</span></li>
|
||||
<li><svg class="icon" aria-hidden="true"><use href="#i-check"/></svg><span>Your files and database live in Docker volumes on your server.</span></li>
|
||||
</ul>
|
||||
@@ -558,7 +559,8 @@ cp docker-compose.example.yml docker-compose.yml
|
||||
<span class="comment"># Generate an app key and paste it into docker-compose.yml</span>
|
||||
docker run --rm gitea.nonameweb.ch/nonameweb/sealshare:latest php artisan key:generate --show
|
||||
|
||||
<span class="comment"># Edit docker-compose.yml — set APP_KEY and APP_URL; AUTO_HTTPS and SERVER_NAME for automatic TLS</span>
|
||||
<span class="comment"># Edit docker-compose.yml — set APP_KEY and APP_URL</span>
|
||||
<span class="comment"># Uploads need HTTPS: set AUTO_HTTPS and SERVER_NAME, or use a reverse proxy</span>
|
||||
<span class="comment"># Then start:</span>
|
||||
docker compose up -d</code></pre>
|
||||
</div>
|
||||
@@ -575,7 +577,14 @@ docker compose up -d</code></pre>
|
||||
<summary>Is SealShare end-to-end encrypted?<svg class="icon" aria-hidden="true"><use href="#i-expand-more"/></svg></summary>
|
||||
<div class="faq__answer">
|
||||
<p>No. The uploader's browser encrypts each file in chunks with AES-256-GCM before sending it, and SealShare stores the files only in encrypted form. But the key comes from your server, which checks every chunk and decrypts the files again for downloads — so the server can read them, which is why it matters that the server is yours.</p>
|
||||
<p>For a share without a password the key is kept in SealShare's database. With a share password the key is locked with that password and never stored as it is, so the files cannot be decrypted without it.</p>
|
||||
<p>For a share without a password the key is kept in SealShare's database. With a share password the key is wrapped with a key derived from that password (Argon2id) and never stored as it is, so the files cannot be decrypted without it.</p>
|
||||
</div>
|
||||
</details>
|
||||
<details>
|
||||
<summary>Why do uploads need HTTPS?<svg class="icon" aria-hidden="true"><use href="#i-expand-more"/></svg></summary>
|
||||
<div class="faq__answer">
|
||||
<p>Files are encrypted in the uploader's browser with WebCrypto, and browsers only offer WebCrypto over HTTPS or on localhost. Over plain HTTP the upload page says so and takes no files; downloads keep working.</p>
|
||||
<p>Set <code>AUTO_HTTPS: "true"</code> and <code>SERVER_NAME</code> to get a Let's Encrypt certificate, with ports 80 and 443 reachable from the internet. Or put a reverse proxy that terminates TLS in front of SealShare.</p>
|
||||
</div>
|
||||
</details>
|
||||
<details>
|
||||
@@ -587,7 +596,8 @@ docker compose up -d</code></pre>
|
||||
<details>
|
||||
<summary>How big can files be?<svg class="icon" aria-hidden="true"><use href="#i-expand-more"/></svg></summary>
|
||||
<div class="faq__answer">
|
||||
<p>As big as your server allows. The Docker image accepts up to 4 GB per file by default; within that, you set the maximum file size and share size in the admin settings (100 MB and 2 GB out of the box). Behind a reverse proxy, raise its request size and timeouts as well.</p>
|
||||
<p>As big as you allow. You set the maximum file size, share size and storage quota in the admin settings (100 MB, 2 GB and 20 GB out of the box); PHP's upload limits do not cap them.</p>
|
||||
<p>Files go up in chunks of 16 MB (<code>UPLOAD_CHUNK_SIZE_MB</code>), so a reverse proxy only needs a request body limit a little above one chunk. Unfinished uploads count towards the quota and are deleted after 4 hours.</p>
|
||||
</div>
|
||||
</details>
|
||||
<details>
|
||||
|
||||
Reference in New Issue
Block a user