Andreas Reinhold / reiniandClaude Opus 5
40e35bab0e
A 6 GB upload kept a customer waiting long after its progress bar
reached 100%. The server wrote every upload three times: PHP's
temporary file, Livewire's copy of it ("Processing files...") and the
encrypted file ("Create Share Link"), each a full rewrite of a slow
disk. The unencrypted copy also stayed behind in livewire-tmp.
Now the uploader's browser encrypts each file in 16 MB chunks with
WebCrypto and PUTs them one at a time; the server checks each chunk in
memory and writes it once, already encrypted. Creating the share only
wraps its key and saves the options. A 200 MB upload through the
Docker image took 2.8 s, and its download matched byte for byte.
- SEALCHK2: a 19-byte header (chunk size, 7-byte nonce prefix), then
ciphertext and tag per chunk. Each nonce holds the chunk index and a
last-chunk flag (the STREAM construction), so cut or reordered files
fail to decrypt. SEALCHK1 and the single-block format still read.
- Envelope encryption: one random key per share. With a password it is
wrapped with Argon2id (sodium, libsodium's interactive limits) in
shares.wrapped_key, which names its parameters. Password shares from
before keep their PBKDF2-derived key.
- The upload page registers each selection with FileUploader into a
pending share of its own, lists the files with their progress, retries
a failed chunk after 1-16 s, then offers Retry; Remove and Cancel
abort. UploadChunkController only accepts chunks from the session that
started the share: a repeat is acknowledged, a skip gets 409 with the
count stored. Chunks go out as Blobs, which Chromium sends about eight
times faster than ArrayBuffers.
- Uploads need a secure context: over plain HTTP the page says HTTPS is
needed and takes no files. The Docker image gains AUTO_HTTPS, which
serves Let's Encrypt on 443 for SERVER_NAME and redirects 80; without
it the container stays on HTTP 80 behind a proxy. docker/Caddyfile was
never loaded and is gone; docker/healthcheck.sh covers both modes.
- "Download all" streams the ZIP with maennchen/zipstream-php (STORE,
ZIP64) instead of decrypting whole files into memory and writing the
archive unencrypted to /tmp.
- Pending shares count towards the quota, stay out of the admin
dashboard and 404 everywhere else. shares:cleanup deletes uploads idle
for 4 hours and Livewire temporary files older than that.
- PHP's upload limits no longer cap the admin's max file size and
default to 64M; LIVEWIRE_MAX_UPLOAD_TIME is gone and
UPLOAD_CHUNK_SIZE_MB is new.
- Tests cover the format, key wrapping, registration limits, the chunk
endpoint's answers, completing a share, the streamed ZIP, cleanup,
and in Chromium a real chunked upload and the HTTPS warning; the
selected-files overflow test runs again. README, website, CHANGELOG
and .ai/rules follow.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
82 lines
2.6 KiB
YAML
82 lines
2.6 KiB
YAML
services:
|
|
app:
|
|
image: gitea.nonameweb.ch/nonameweb/sealshare:latest
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
restart: unless-stopped
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
- "443:443/udp"
|
|
volumes:
|
|
- sealshare_storage:/app/storage/app
|
|
- sealshare_database:/app/database
|
|
- caddy_data:/data
|
|
- caddy_config:/config
|
|
environment:
|
|
APP_KEY: ${APP_KEY:?Set APP_KEY in .env or environment}
|
|
APP_URL: ${APP_URL:-http://localhost}
|
|
APP_ENV: ${APP_ENV:-production}
|
|
APP_DEBUG: ${APP_DEBUG:-false}
|
|
AUTO_HTTPS: ${AUTO_HTTPS:-false}
|
|
SERVER_NAME: ${SERVER_NAME:-localhost}
|
|
DB_CONNECTION: ${DB_CONNECTION:-sqlite}
|
|
DB_HOST: ${DB_HOST:-}
|
|
DB_PORT: ${DB_PORT:-}
|
|
DB_DATABASE: ${DB_DATABASE:-/app/database/database.sqlite}
|
|
DB_USERNAME: ${DB_USERNAME:-}
|
|
DB_PASSWORD: ${DB_PASSWORD:-}
|
|
LOG_CHANNEL: ${LOG_CHANNEL:-stderr}
|
|
LOG_LEVEL: ${LOG_LEVEL:-warning}
|
|
SESSION_DRIVER: ${SESSION_DRIVER:-database}
|
|
QUEUE_CONNECTION: ${QUEUE_CONNECTION:-database}
|
|
CACHE_STORE: ${CACHE_STORE:-database}
|
|
OCTANE_HTTPS: ${OCTANE_HTTPS:-false}
|
|
OCTANE_MAX_EXECUTION_TIME: ${OCTANE_MAX_EXECUTION_TIME:-300}
|
|
UPLOAD_CHUNK_SIZE_MB: ${UPLOAD_CHUNK_SIZE_MB:-16}
|
|
PHP_UPLOAD_MAX_FILESIZE: ${PHP_UPLOAD_MAX_FILESIZE:-64M}
|
|
PHP_POST_MAX_SIZE: ${PHP_POST_MAX_SIZE:-64M}
|
|
PHP_MAX_EXECUTION_TIME: ${PHP_MAX_EXECUTION_TIME:-300}
|
|
PHP_MAX_INPUT_TIME: ${PHP_MAX_INPUT_TIME:-300}
|
|
PHP_MEMORY_LIMIT: ${PHP_MEMORY_LIMIT:-512M}
|
|
healthcheck:
|
|
test: ["CMD", "/app/docker/healthcheck.sh"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
start_period: 10s
|
|
retries: 3
|
|
|
|
scheduler:
|
|
image: gitea.nonameweb.ch/nonameweb/sealshare:latest
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
restart: unless-stopped
|
|
entrypoint: ["php", "artisan", "schedule:work"]
|
|
volumes:
|
|
- sealshare_storage:/app/storage/app
|
|
- sealshare_database:/app/database
|
|
environment:
|
|
APP_KEY: ${APP_KEY:?Set APP_KEY in .env or environment}
|
|
APP_URL: ${APP_URL:-http://localhost}
|
|
APP_ENV: ${APP_ENV:-production}
|
|
APP_DEBUG: ${APP_DEBUG:-false}
|
|
DB_CONNECTION: ${DB_CONNECTION:-sqlite}
|
|
DB_HOST: ${DB_HOST:-}
|
|
DB_PORT: ${DB_PORT:-}
|
|
DB_DATABASE: ${DB_DATABASE:-/app/database/database.sqlite}
|
|
DB_USERNAME: ${DB_USERNAME:-}
|
|
DB_PASSWORD: ${DB_PASSWORD:-}
|
|
LOG_CHANNEL: ${LOG_CHANNEL:-stderr}
|
|
LOG_LEVEL: ${LOG_LEVEL:-warning}
|
|
depends_on:
|
|
app:
|
|
condition: service_healthy
|
|
|
|
volumes:
|
|
sealshare_storage:
|
|
sealshare_database:
|
|
caddy_data:
|
|
caddy_config:
|