Erugo Self-Hosted File Transfer Server

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## Why This AMI Instead of Self-Deploying?

Erugo is a popular open source, self-hosted file-transfer and file-sharing platform - a Laravel backend with a Vue web client that lets a team upload files and hand recipients a clean, expiring download link. Deploying it yourself means installing PHP and nginx, compiling the Vue frontend the source release ships without, wiring up a resumable-upload sidecar and a queue worker, generating application and signing secrets, provisioning TLS, and closing the open first-run setup wizard before it becomes an anonymous admin-takeover hole. This AMI eliminates that effort entirely - your self-hosted transfer server is running within minutes of launch, not hours, in a pre-hardened, tested configuration backed by 24/7 expert support with a one-hour average response for critical issues.

The current release available is Erugo 0.2.15.

## Application Stack

nginx terminates TLS on port 443 (with a plain-HTTP redirect on port 80) and serves the compiled Vue frontend and the Laravel API through PHP 8.3 FPM. Resumable uploads stream through a tusd sidecar on the loopback address, share packaging and notifications run on a dedicated queue worker, and a scheduler timer drives share expiry and cleanup. The application database is SQLite and all application data lives on a dedicated, independently resizable data volume separate from the operating-system disk.

## Secure By Default

Many pre-built images ship with shared or default credentials - a common vulnerability that exposes instances immediately after launch. This image eliminates that risk entirely:

• A unique application key, a unique JWT signing secret and a unique self-signed TLS certificate are generated for every instance on its first boot, before the application starts
• The single administrator account is rotated to a per-instance random password on first boot and stored in a root-only file, inaccessible to unprivileged users
• The first-run setup wizard is sealed at build time, so it cannot be used to mint a second administrator on a reachable instance
• No shared or default password ships in the image; build-time state is wiped before capture

## Ready To Use

Browse to the instance over HTTPS, sign in with the generated administrator credentials, and send your first file. Recipients download through a clean share link with no account, and you control expiry, deletion and optional share passwords. Branding, theming, e-mail notifications and OIDC sign-in are all supported.

## What You Avoid By Using This AMI

• Installing PHP, nginx and the resumable-upload and queue tooling by hand
• Compiling the Vue frontend that the source-only release ships without
• Generating and securely storing application and signing secrets and TLS certificates
• Sealing the open first-run setup wizard and hardening the first administrator account
• Ongoing maintenance and security patching without expert guidance

## cloudimg Support

24/7 technical support by email and chat with a one-hour average response for critical issues. Our engineers help with deployment, TLS termination with your own certificate, backups, user management, share policies and scaling.

## Use Cases

• Self-hosted, in-your-own-VPC file transfer with full data ownership and no third-party cloud storage
• Sending large files to external recipients with expiring, optionally password-protected download links
• A private, data-residency-friendly alternative to hosted file-sharing services for regulated teams

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.