Safebucket

Safebucket is an open-source platform for sharing files on infrastructure you control. Its distinguishing design choice is that uploads and downloads use presigned URLs, so file data goes straight between the user and the storage backend and bypasses the application server. That keeps the server light and avoids it becoming a bottleneck for large transfers.

The platform covers the sharing workflow with quick and reverse share links that can be protected by a password or limited by download or view count, role-based access control at platform and bucket level, and file expiration with a configurable trash retention period. Sign-in works through any OIDC provider, local accounts exist for external users, and TOTP multifactor authentication is supported. Administrators get an activity feed, audit logs and a dashboard with platform-wide statistics.

Each component, including storage, database, events, cache and notifier, can be swapped for another implementation. The backend is written in Go, is licensed under Apache-2.0 and ships as container images that are signed with cosign. A Docker-based quick start brings it up locally on port 8080.