Andreas Reinhold / reiniandClaude Opus 4.8
91dc4707af
Bump Vite 7 to 8 and laravel-vite-plugin 2 to 3. These are coupled: laravel-vite-plugin@3.1.3 peer-requires vite ^8.0.0, so neither moves alone. Also concurrently 9 to 10, tailwindcss and @tailwindcss/vite to 4.3.3, daisyui to 5.7.0, alpinejs to 3.15.12 and autoprefixer to 10.5.4. Drop axios. It had zero imports anywhere in resources/ or vite.config.js, and Laravel 13 removed it from the skeleton along with resources/js/bootstrap.js. Drop the @rollup/rollup-linux-x64-gnu optional dependency. Vite 8 builds with rolldown instead of rollup, so the pin no longer refers to anything in the build, and it was stuck at an exact 4.9.5 against a rollup that had since reached 4.62.x. The oxide and lightningcss optional pins are kept, as those native binaries are still used by tailwind and vite. vite.config.js needed no changes: it sets no rollupOptions, esbuild or manualChunks, so nothing hit the vite 8 config renames. Node engines (^20.19 || >=22.12) are satisfied by the node:24-alpine build stage, the dev container's Node 24.17 and CI's Node 24. Verified in a node:24-alpine container matching the Dockerfile assets stage: npm install, npm run build (vite 8.1.5, 3 modules, deterministic hashes) and npm ci all succeed. The rendered /upload page references the new build hashes, and the PHP suite still passes 123 tests. npm audit fix patched a pre-existing picomatch advisory reached via laravel-vite-plugin's vite-plugin-full-reload, with no downgrades. A shell-quote advisory via concurrently remains and is also pre-existing; concurrently is a local dev orchestration tool only and is not shipped to browsers. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
SealShare
A simple, self-hosted file sharing solution built with Laravel. Upload files, get a shareable link, done. All files are encrypted at rest with AES-256-GCM.
Features
- File Uploading — Drag & drop or browse to upload single/multiple files and folders with real-time progress
- Shareable Links — Each upload generates a unique link for recipients
- End-to-End Encryption — All files encrypted at rest using AES-256-GCM (chunked, streaming)
- Password Protection — Optionally protect shares with a password
- Expiration — Shares auto-expire after a configurable duration (1 hour to 30 days)
- Download Limits — Set a maximum number of downloads per share
- ZIP Downloads — Download all files in a share as a single ZIP archive
- Auto-Cleanup — Expired shares and files are automatically deleted (hourly)
- Admin Dashboard — View, manage, and delete all shares
- Admin Settings — Configure upload limits, storage quotas, branding, and more
- Site Branding — Custom logo, title, and description
- System Password — Optional global password gate to restrict upload access
- User Authentication — Login, registration, password reset, email verification
- Two-Factor Authentication — TOTP-based 2FA via Laravel Fortify
- Dark Mode — Dark themed UI with DaisyUI components
- Setup Wizard — First-run wizard to create the initial admin account
Tech Stack
| Layer | Technology |
|---|---|
| Framework | Laravel 12 |
| Application Server | FrankenPHP (via Laravel Octane) |
| Frontend | Livewire 4, Alpine.js, Tailwind CSS 4, DaisyUI 5, Mary UI |
| Authentication | Laravel Fortify |
| Encryption | Chunked AES-256-GCM with PBKDF2-SHA256 key derivation |
| ZIP Streaming | maennchen/zipstream-php |
| Testing | Pest 4 |
| Code Style | Laravel Pint |
| Build Tool | Vite |
Installation — Development
Docker (recommended)
# Build and start the dev container
docker compose -f docker-compose.dev.yml up -d --build
# View logs (including Vite output)
docker compose -f docker-compose.dev.yml logs -f
The app is available at http://localhost:8000 with Vite HMR on port 5173.
Installation — Production
Docker (recommended)
mkdir sealshare && cd sealshare
curl -O https://raw.githubusercontent.com/surtic86/SealShare/main/docker-compose.example.yml
cp docker-compose.example.yml docker-compose.yml
# Generate an app key and paste it into docker-compose.yml
docker run --rm ghcr.io/surtic86/sealshare:latest php artisan key:generate --show
# Edit docker-compose.yml — set APP_KEY, APP_URL, and SERVER_NAME
# Then start:
docker compose up -d
Migrations run automatically on startup. Open your configured domain — the Setup Wizard will create the first admin account.
Key environment variables:
| Variable | Required | Description |
|---|---|---|
APP_KEY |
Yes | Laravel encryption key |
APP_URL |
Yes | Full URL (e.g. https://share.example.com) |
SERVER_NAME |
Yes | Domain for auto-TLS (e.g. share.example.com) |
Volumes:
| Volume | Path | Purpose |
|---|---|---|
sealshare_storage |
/app/storage/app |
Encrypted uploaded files |
sealshare_database |
/app/database |
SQLite database |
caddy_data |
/data |
TLS certificates |
caddy_config |
/config |
Caddy configuration |
Manual (without Docker)
git clone https://github.com/surtic86/SealShare.git
cd SealShare
composer install --no-dev --optimize-autoloader
npm install && npm run build
cp .env.example .env
php artisan key:generate
# Edit .env — set APP_ENV=production, APP_DEBUG=false, APP_URL=https://your-domain.com
touch database/database.sqlite
php artisan migrate --force
php artisan storage:link
php artisan config:cache
php artisan route:cache
php artisan view:cache
Start with Octane:
php artisan octane:frankenphp --host=0.0.0.0 --port=80
Or point your web server (Nginx/Apache) to the public/ directory for a traditional PHP-FPM setup.
Add the scheduler to your crontab:
* * * * * cd /path-to-sealshare && php artisan schedule:run >> /dev/null 2>&1
License
This project is open-source software licensed under the MIT License.