sonlamho / home_fserver

Home file server accessible over HTTP. Built with Flask.

home_fserver

Security details

• Initialize your config.py and password by running python home_fserver/utils.py --init
• Set/reset your password by running python home_fserver/utils.py --set-pass. The hash+salt of the sha256 hash of your password will be saved to a file. Yes we are hashing twice here.
• Generate/regenerate a secure key for your server with python home_fserver/utils.py --generate-key
• When you log in, the password is immediately hashed (sha256) in browser, then that hash is sent to the server to be checked with the saved hash+salt.
• Unless running only on LAN or you know what you're doing, you should always deploy the server with https only. Sending infos without TLS (https) will make your files accessible to other people on the internet.

Deployment instructions

• Copy or symlink the folder you want to share into home_fserver/www/
• Running dev server: ./scripts/run_dev.sh
• Example nginx configurations: ... (Work in progress)
• Run scripts/run_production.sh script to start the server. (Correct nginx config required.)