clickbait/cpomf

Pomf API compatible file host written in Crystal - The software behind nya.is.

cpomf

pomf backend written in crystal for pomf.is

Installation

Prerequisites

• Postgres
• Mschematool
• Crystal 0.20.4

Setup

Set your environment variables:

• POMF_PORT - The port that cpomf listens to.
• POMF_DEBUG - Whether or not cpomf is in debug mode true|false
• POMF_DATABASE_URL - The postgres URL for your database, eg; postgres://localhost/pomf_database
• POMF_SECRET_KEY - Your secret key; preferably something that's long and randomly generated.
• POMF_ADMINS - A comma seperated list of admin usernames; keeping in mind that usernames are lowercase and alphanumeric only.
• POMF_BLACKLISTED_NAMES - A comma seperated list of banned usernames; it's usually good to blacklist names like admin or anything else you don't want users to use.
• POMF_UPLOAD_DIR - Relative path to your pomf upload directory.
• POMF_URL - the root URL of your site; eg. https://pomf.is/
• POMF_UPLOAD_URL - The upload URL for your site; eg. https://u.pomf.is/

Run shards install to install dependencies.

Run mschematool default init_db and then mschematool default sync

Compile the project with crystal build --release pomf.cr

Usage

Run cpomf like you would run any other binary file ./pomf

Use a nginx reverse proxy to cpomf; and use nginx to handle static files, including those in /src/pomf/public; google tutorials if you need to.

Please make sure that you modify the default templates and styles before you host your own clone; I've left nya.is' designs in as a reference, but being unique is king in a sea of clones.

Make sure you create your account before you release your site.

Contributing

1. Fork it ( https://github.com/neko/cpomf/fork )
2. Create your feature branch (git checkout -b my-new-feature)
3. Commit your changes (git commit -am 'Add some feature')
4. Push to the branch (git push origin my-new-feature)
5. Create a new Pull Request

Contributors

• neko neko - creator, maintainer
• RX14 RX14 - contributor

cpomf's Issues

Download non-whitlisted files via dl manager supports.

I just wondering the way I can download .zip, .rar, and .exe via uGet/Wget and FDM. I have to bypass CAPTCHA and it's IMPOSSIBLE.

Here the idea: "Cookie: allow-download=1"
That the way I able to download file directly via web browser, wget and download manager on Volafile.

I hope this feature implemented.

whitelist/blacklist by mimetype

instead of whitelisting/blacklisting by file extension, it may be safer to do it by mimetype

considering using this shard, but is there a better way to do this? @RX14

don't show download page when file doesn't exist

which also leads to another problem, how should we delete files from the db if the antivirus deletes them?

limf for cpomf

do it.

Looks like your security certificate expired

componentizing

I feel that several features of the site could be broken into their own shards. This would mean that the shards could be maintained separately, plugged into different projects, and could offer a larger amount of customization.

use multipart shard

would be easier to use the multipart shard instead of having to use our own crystal version

Integrations

There are a couple of utilities that I'd like to have a go at creating for Nya.is.

• Chrome Extension
• WordPress Plugin

no js upload

caps

what do

deprecate old repo

probably best to keep everything to this one now, to keep things cleaner and less confusing

"remember me" option.

This is useful because I don't have to retype email and password to login every time I closed my browser or end the session.

Edit:
I don't see logout option, the only way to logout is: close the browser. If it is it, then no problem.

regenerate user token option

It's like "Oh no, I accidentally posted my nya.is token to public! Gotta find the way to regenerate it!"

whitelisting

asshats keep uploading viruses and getting pomf/nya blacklisting, i think the best option is to move from generic file hosting to media hosting (as that is what pomf & nya are mainly used for).

i'll be doing extensive research into what filetypes should be safe and which filetypes are getting uploaded to pomf & nya.

temporarily disable any delete functionality

might as well get this live, delete stuff can be disabled for now

Switch from SHA-1 into something else.

For security, I recommend to drop SHA-1 then stick to something else like: SHA-256 or SHA-3.

Read this: https://shattered.it/

file blacklisting

full deletion transparency

i'd like to leave a log of files deleted and why they were deleted. shouldn't be hard to implement.