Gokapi, the lightweight open source self hosted file sharing server: upload files and share download links with optional expiry, download limits and passwords.
Gokapi is an open source self hosted file sharing server from Forceu. You sign in to an admin panel, upload files, and Gokapi gives you a shareable download link for each one, with per file controls for expiry time, number of downloads, an optional password and image hotlinking. It is a lean, privacy respecting alternative to third party file transfer services: your files stay on your own server and never touch a third party.
The backend is a local SQLite database with files stored on the server's own disk, so nothing external is required to start sharing. When you are ready to scale, Gokapi can be repointed at an S3 compatible object store or Redis, and it ships an API and a CLI uploader for automation.
cloudimg ships Gokapi hardened, fully patched and secure by default. The first run setup is completed at build time so no unauthenticated setup wizard is ever exposed, and on first boot every instance generates its own Gokapi admin password AND its own HTTP Basic Auth password for the admin surface, stored in a root only file. The server binds to loopback only behind an nginx reverse proxy, the management endpoints get defence in depth from Basic Auth layered over Gokapi's own login, and public download links stay open so recipients can fetch shared files. No shared or default credential survives into the image, and 24/7 cloudimg support backs it.
Real screenshots taken while testing this image against its deployment guide.